Security Engineer, Attack Surface Intelligence

With 1,000 intelligence professionals, over $300M in sales, and serving over 1,900 clients worldwide, Recorded Future is the world’s most advanced, and largest, intelligence company!

Security Engineer, Attack Surface Intelligence

Now part of Mastercard but still operating independently, Recorded Future is at the leading edge of not only cyber intelligence, but also providing intelligence data at the forefront of one of the largest global payment networks.

We are seeking a highly skilled and motivated Security Engineer to work on the development of the threat and vulnerability signatures that go into our Internet scanning platforms within the Attack Surface Intelligence group, on the Threat Research and Active Collection of Exposures (TRACE) team and Signature Engineering and Exposure Development (SEED)  sub-team. The ideal candidate will have experience in large security-related projects, serving as an individual contributor. This position requires excellent communication skills to coordinate seamlessly with principal engineers, junior engineers, and DevOps teams for iterative development and deployment of updates.

What You'll Do: 

• Design, develop, and optimize new and existing components of the signature library that feeds our scalable Internet scanning platform with a global reach.
• Contribute to the development of automations for our signature generation capabilities.
• Collaborate closely with cross-functional teams to ensure seamless integration and deployment of new features and updates.
• Regularly communicate project status, challenges, and insights to the principal engineer and your manager.
• Participate in technical discussions and initiatives aimed at improving our scanning technologies and processes.
• Leverage experience in computer networking and cybersecurity to enhance the security data collections of our platform.

What You'll Bring: 

• 3-5+ years of experience in software or security engineering, ideally in an Enterprise SaaS,Cybersecurity, or Computer Networking vendor.
• Solid grasp of vulnerability classification, CVSS/EPSS scoring, and exploitation techniques, with the ability to understand the vulnerable condition and how it might be exploited.
• Production-level development experience in Python or Go.
• Passion for automation going beyond building things, but making them efficient, observable, reliable, and a human-in-the-loop is only where necessary. 
• Demonstrated experience working in and building on top of AWS services.
• A built-in desire for systems you build and maintain to monitor them, build dashboards, view and analyze logs for alerting, and compile metrics for improving performance.
• Extensive familiarity with the TCP/IP protocol stack, including application of concepts from HTTP, DNS, SSL, WHOIS, and other artifacts needed for technical reconnaissance and discovery.
• Hands-on experience with Git (or similar VCS) and collaborative development workflows.
• Ability to analyze and take action on internal and customer escalations that cannot be solved by our support teams.
• Strong regular-expression skills for precise pattern matching and extraction.
• Solid understanding of software development principles, design patterns, testing, and best practices.
• Bachelor’s degree in Computer Science, Cybersecurity, Software Engineering, or a related field, or equivalent work/education experience.
• Excellent problem-solving and troubleshooting skills, with the ability to work under minimal supervision.
• Strong interpersonal skills, with the ability to effectively communicate complex technical concepts into clear, actionable language for engineers, executives, and customers.
• Strong English language skills are a must.

Preferred Qualifications : 

• Any familiarity with cybersecurity principles and the unique challenges of developing cybersecurity products
• Any familiarity with things like portscanning, vulnerability scanning, or signature development
• Any familiarity with red-teaming tools, such as Metasploit, Impacket, and familiarity with offensive frameworks and adversary emulation platforms.
• Experience building and deploying vulnerability detections and signatures to security products.
• Any familiarity with enterprise security products related to Recorded Future’s offerings

Why should you join Recorded Future?
Recorded Future employees (or “Futurists”), represent over 40 nationalities and embody our core values of having high standards, practicing inclusion, and acting ethically. Our dedication to empowering clients with intelligence to disrupt adversaries has earned us a 4.8-star user rating from Gart