Product Detection Engineer

Censys is a company dedicated to providing comprehensive Internet intelligence and actionable threat insights. They are seeking a Product Detection Engineer to work on fingerprinting hardware, software, and services within their Internet Intelligence Platform, as well as developing detections for vulnerabilities and misconfigurations.

Responsibilities:

• Develop custom fingerprints against Censys scan data to enrich, contextualize, and uncover risks in services and infrastructure running on the Internet
• Consult with the Data engineering team to implement improvements to our scanning infrastructure (e.g., identify changes to scanning targets, payloads, and collection of data) to increase the fidelity and accuracy of identification of software and hardware versions and models
• Coordinate with our Go-to-Market and Sales teams to facilitate researching and fingerprinting of emerging vulnerabilities, threats, and high-priority detections
• Participate in on-call rotations to ensure 24x7 coverage of hi-impact, critical security vulnerabilities

Requirements:

• Bachelor's degree in Computer Science, Data Science, Engineering, or other technical discipline (or equivalent professional experience)
• 2+ years of experience in security research/systems security/network security or a similar field
• Experience with protocol analysis and in-depth knowledge of common protocols such as TLS, HTTP, SSH, SMB, SMTP
• High-level understanding of common network security vulnerabilities, CVSS scoring and exploit techniques
• Experience exploring active scan data using tools such as Censys Search, Shodan, or similar; and/or experience with data analysis tools such as Google BigQuery
• Proficient with regular expressions and other pattern-matching expressions
• Experience in at least one scripting/programming language with a preference for Go and Python
• Ability to concisely communicate complex subject matter to technical and non-technical audiences
• Ability to work independently as a researcher while being part of a larger cross-functional team