132 applicants

Company

Recorded Future · 3 hours ago

Senior Engineering Manager, (Python, Pen-testing, Nuclei)

Somerville, MA

Full-time

Remote

Senior Level, Lead/Staff

5+ years exp

Maximize your interview chances

AnalyticsCyber Security

Culture & Values

H1B Sponsor Likely

Insider Connection @Recorded Future

Discover valuable connections within the company who might provide insights and potential referrals.
Get 3x more responses when you reach out via email instead of LinkedIn.

Responsibilities

Lead the research and analysis of current and emerging digital threats, identifying vulnerabilities and devising defensive strategies for our cybersecurity scanning products.

Oversee and mentor junior R&D personnel, guiding their research efforts and ensuring their work aligns with the company's strategic goals.

Continuously monitor and assess the threat landscape to ensure our products remain effective against the latest cybersecurity threats.

Develop rapid response strategies to new threats, ensuring timely updates to our scanning products.

Conduct in-depth vulnerability assessments, including the creation of custom network vulnerability checks and validation techniques.

Work closely with product development teams to integrate research findings into product enhancements and new feature development.

Produce high-quality technical documentation, including research papers, vulnerability reports, and user guides, that translates complex concepts into accessible content.

Drive the innovation of new techniques for threat detection, vulnerability analysis, and defensive strategies, ensuring our products are always ahead of the curve.

Utilize common threat intelligence models such as MITRE ATT&CK, D3FEND, the Diamond Model, and the Cyber Kill Chain to enhance threat detection capabilities.

Stay up to date with industry trends, participate in cybersecurity forums, and contribute to the broader cybersecurity community through research publications and presentations.

Qualification

Find out how your skills align with this job's requirements. If anything seems off, you can easily click on the tags to select or unselect skills to reflect your actual expertise.

CybersecurityThreat detectionVulnerability assessmentAttack surface managementScripting languagesIncident responseTechnical writingTeam managementPenetration testingTenableRapid7QualysNucleiNMapZmapBurpZapAmassSubfinderDomainToolsVirusTotalSHODANCensysYAMLPythonGolangJavascriptCOSCPOSWA

Required

A degree in Cybersecurity, Computer Science, Information Technology, or equivalent experience.

A minimum of 5 years of substantial experience in cybersecurity, with a focus on threat detection, penetration testing, or vulnerability assessment.

In-depth understanding of attack surface management, including asset discovery, service fingerprinting, enumeration, and vulnerability scanning.

Extensive experience with tools such as Tenable, Rapid7, Qualys, or Nuclei for creating and validating network vulnerability checks.

Experience with Internet-scale scanning and discovery.

Strong grasp of cybersecurity principles, attack trajectories, and vulnerability analysis techniques.

Demonstrable experience in researching and analyzing new cyber threats across various industries and timeframes.

Proven ability to deploy vulnerable infrastructure in a lab environment for threat analysis.

Experience authoring signatures and checks for vulnerability identification.

Practical experience with recon and security testing tools such as NMap, Zmap, Burp, Zap, Amass, and Subfinder.

Experience with vulnerability research and binary analysis for patch diffing.

Familiarity with cyber threat intelligence tools like DomainTools, VirusTotal, SHODAN, and Censys.

Strong technical writing skills with a portfolio of published work.

Proficiency in scripting and programming languages such as YAML, Python, Golang, Javascript, and C.

Prior experience in a quick reaction or incident response team environment.

Preferred

Relevant industry certifications such as OSCP, OSWA, GWAPT, Pentest+, or equivalent.

Experience in driving innovation within a research environment, particularly in threat detection and defense mechanisms.

Experience working within a product-focused R&D environment, contributing to the development of commercial cybersecurity solutions.

Company

Recorded Future

Glassdoor

4.2

Recorded Future provides threat intelligence for proactive cybersecurity and risk management.

Founded in 2009

Somerville, Massachusetts, USA

501-1,000 employees

http://www.recordedfuture.com

H1B Sponsorship

Recorded Future has a track record of offering H1B sponsorships. Please note that this does not guarantee sponsorship for this specific role. Below presents additional info for your reference. (Data Powered by US Department of Labor)

Distribution of Different Job Fields Receiving Sponsorship

Represents job field similar to this job

Trends of Total Sponsorships

2023 (2)

2022 (3)

2021 (2)

2020 (1)