Vulnerability Researcher
Key Skills for This Role
Full Job Posting
Qualifications
- 7+ years of professional work experience in the cybersecurity industry with Bachelor’s degree in Computer Science, Management Information Systems, or a related field, or equivalent work experience.
- Understanding of all phases of adversary emulation operations, including reconnaissance, social engineering, exploitation, post-exploitation, covert techniques, lateral movement, and data exfiltration.
- Extensive experience in offensive cybersecurity roles, such as red teaming, penetration testing (e.g., web, infrastructure, cloud), and purple team exercises across cloud and on-prem environments.
- Robust understanding of contemporary security theory, application exploitation techniques, and attack vectors, including the vulnerability lifecycle and scanning methodologies (SAST, DAST, IAST, RASP).
- Experience developing and managing testing methodologies that adhere to common security guidelines such as OWASP and frameworks such as NIST 800 or MITRE ATT&CK.
- Solid understanding of computer architecture and organization with respect to binary analysis and exploitation.
- Ability to analyze, create, and debug shellcode and other low-level exploits.
- Experience developing custom security software (offensive or defensive) in one or more compiled languages.
- Demonstrated ability to reverse engineer binaries, enumerate vulnerabilities in compiled software, and provide working exploits (e.g., CVEs, public acknowledgements, or the ability to demonstrate on demand).
- Familiarity with automated security analysis and fuzzing tools (e.g., AFL and Peach).
- Demonstrated ability to discover vulnerabilities via static analysis and source code review.
- Working understanding of key programming languages and frameworks (e.g., Java, Node.js, Python, JSP), including the ability to quickly learn new languages, understand their security implications, and enumerate vulnerabilities in custom-developed software packages.
- Familiarity with scripting and programming in Python, PowerShell, or C#, with the ability to create and customize tools.
- Excellent written and verbal communication skills, including technical writing, documentation development, process mapping, and visualization.
- Ability to communicate technical concepts effectively to both technical and non-technical audiences across various roles and levels.
- Strong analytical and problem-solving skills, with the ability to examine issues strategically and analytically.
- Ability to interact effectively with co-workers and external contacts and work collaboratively in a team environment.
- Ability to manage multiple simultaneous initiatives and prioritize workload to meet commitments.
- Self-motivated with a strong sense of urgency, an adaptive mindset, and a demonstrated ability to learn quickly.
- Base Pay Information The national base pay range at the end is a good-faith estimate of what Delta Dental may pay for new hires. Actual pay may vary based on Delta Dental’s assessment of the candidate’s knowledge, skills, abilities (KSAs), related experience, education, certifications, and ability to meet required minimum job qualifications. Other factors impacting pay include prevailing wages in the work location and internal equity. Pay Grade 25. $142,077 - $307,899
- Base Pay Information
- The national base pay range at the end is a good-faith estimate of what Delta Dental may pay for new hires. Actual pay may vary based on Delta Dental’s assessment of the candidate’s knowledge, skills, abilities (KSAs), related experience, education, certifications, and ability to meet required minimum job qualifications. Other factors impacting pay include prevailing wages in the work location and internal equity.
- Pay Grade 25. $142,077 - $307,899
Responsibilities
- Conducts research to identify highly impactful, unknown vulnerabilities in a wide variety of applications and technologies, including AI-enabled applications and services
- Performs vulnerability assessments using industry best practices on various environments, including web applications, APIs, and cloud infrastructure
- Develops and manages testing methodologies that adhere to common security guidelines and NIST standards
- Conducts an evaluation of cloud security configurations, identifies prevalent vulnerabilities in cloud security controls, and improves and maintains cloud testing standards
- Provides detailed reports with proof of vulnerabilities, guidance, and advice to support customer teams through vulnerability remediation
- Develops and communicates comprehensive and accurate reports and presentations for client stakeholders including technical staff and executive leadership
- Maintains communication with management regarding development within assigned responsibilities and performs special projects as required
- Researches and develops innovative techniques, tools, and methodologies for vulnerability research and red team activities
- Develops leadership-level communications, including management-specific metrics, white papers, procedures, thought position papers, etc.
- This list is not all-inclusive, and you are expected to perform other cybersecurity-congruent duties as requested or assigned
About Delta Dental
Apply for this job in 1 click
Skip the repetitive application forms
Install the Base Career Chrome Extension and autofill job applications across major job boards with your profile.
Trusted by over 500,000 job seekers on Base Career
More from this employer
More jobs at Delta Dental
Senior Software Engineer (Developer Experience/Platform Engineering)
Alpharetta, USA
Senior Software Engineer (Developer Experience/Platform Engineering)
Alpharetta, USA
Director, Data & Analytics Product Management
Boston, USA
The employer is seeking a director to set strategy and lead the enterprise portfolio of data, analytics, reporting, and AI products. The role oversees product teams and the full product lifecycle, aligning investments wi
Technical Business Analyst
Fenton, USA
Delta Dental seeks a Technical Business Analyst to translate business needs into technical specifications and support Agile software delivery. The role combines requirements analysis, coding and systems collaboration, te
Senior Software Engineer (Developer Experience/Platform Engineering)
Alpharetta, USA
Senior Software Engineer (Developer Experience/Platform Engineering)
Alpharetta, USA
Key Account Manager
, USA
Key Account Manager
, USA
Director, Data & Analytics Product Management
Boston, USA
Technical Business Analyst
Fenton, USA
Vulnerability Researcher
, USA
Expert Program Manager - Payment Integrity
, USA