Senior Cyber Security Researcher

<p><strong>What we do at Detectify</strong></p><p>We’re Detectify, and we’re not your average cybersecurity company. We’re a team obsessed with building cutting-edge tech that actually makes a difference in making the internet a safer place. We’re talking about real-life hackers who know their stuff. You'll learn from the best and join a team that combines human ingenuity with automation to streamline asset discovery and vulnerability assessments.</p><p><strong>What you’ll get to do</strong></p><p>As a Security Researcher, your main mission is to develop proof-of-concepts for novel ways of detecting vulnerabilities, broadening what Detectify’s engines can find. In other words, your research ends up protecting thousands of real-world attack surfaces.</p><p><strong>Other responsibilities include:</strong></p><ul><li><p>Stay on top of the latest security research, disclosures and techniques, and figure out which ones we can and should turn into scalable detection.</p></li><li><p>Research new attack vectors and vulnerability classes that can be automated, and identify where we can source them.</p></li><li><p>Design and build agentic workflows that use AI to uncover new vulnerabilities and 0-days.</p></li><li><p>Reverse engineer binaries to find vulnerabilities and understand how they can be exploited.</p></li><li><p>Review detection code to make sure our tests are accurate and keep false positives to a minimum.</p></li><li><p>Act as a go-to security expert for colleagues across the company and help with security-related questions and tasks.</p></li><li><p>Talk with customers to understand their attack surfaces and security challenges, and use those insights to shape what we research and build next.</p></li></ul><p><strong>Who you are</strong></p><ul><li><p>You’re highly versatile and self-motivated, and you can create and drive change. You’re active in the security community and you understand how vulnerabilities work, not just that they exist. You probably also have:</p></li><li><p>Hands-on experience finding and exploiting live vulnerabilities, for example through bug bounty programs, CVEs, CTFs, penetration testing or published research.</p></li><li><p>Deep knowledge of web application security and common vulnerability classes (OWASP Top 10 and beyond).</p></li><li><p>Solid programming or scripting skills (for example Python or Go) and the ability to turn an idea into a working proof-of-concept.</p></li><li><p>Curiosity about using LLMs and AI agents in offensive security, or experience building with them already.</p></li><li><p>The ability to explain technical findings clearly to engineers, customers and non-security stakeholders.</p></li></ul><p><strong>Bonus points if you:</strong></p><ul><li><p>Have experience with reverse engineering.</p></li><li><p>Have publicly disclosed vulnerabilities, written blog posts or given talks at security conferences.</p></li></ul><p><strong>What’s in it for you?</strong></p><p><strong>Hybrid work</strong></p><p>This position is for the Stockholm office. We offer hybrid working, with access to our office in central Stockholm and would like to see you at the office at least 3 days per week.</p><p><strong>So, what do you think?</strong> We are proud to foster an inclusive workplace free from discrimination. We strongly believe that diversity of experience, perspectives, and background will lead to a better environment for our employees and a better product. This is something we value deeply and we encourage everyone to be a part of changing the way the world thinks about security! <strong>Go hack yourself!</strong></p><p>Please note <span>that to be eligible for this position, candidates must already possess a valid work visa for Sweden, as we are unable to provide visa sponsorship or relocation assistance.</span></p>