Senior Security Analyst

We are looking for a curious, analytical, and detail-oriented Security Analyst to join our team and help us build the best DB of open source vulnerabilities out there.

Your Role

In modern software development, much of any project's code relies on open source packages. These are out there in the world, visible to anyone, and within that code there are vulnerabilities. As part of our team, you'll join us on our mission to continually improve our ability to find these open source vulnerabilities in a programmatic way.

You'll join our interdisciplinary team, alongside fully dedicated engineers focused on building tools that make your work more effective and have lots of opportunities to learn and grow. This role is particularly well-suited to help you develop a deep understanding of how code works, and over time you'll have the opportunity to work with just about every programming language.

You’ll spend your time:

• Triaging and analysing potential vulnerabilities discovered within open-source dependencies
• Further researching known vulnerabilities to determine characteristics such as severity and exploitability
• Using research to verify or disqualify potential vulnerabilities
• Using data analyst techniques to answer research questions about vulnerabilities, and general threat intelligence trends
• Developing and testing theories and hypotheses around new areas that Snyk tackles
• Exploring and establishing the new abilities we need to develop our product to further achieve our mission
• Training machine learning models to find where vulnerabilities are most likely to exist, using a combination of our unique database of verified known vulns; information about how the open source community operates; and the static code itself

You should apply if you:

• You're comfortable working with large datasets (we mainly use BigQuery, PostgreSQL, Looker)
• You have a passion for security and an interest in the problem space
• You’ve triaged and analysed data before and you have experience using statistical tools to help answer research questions
• You love to automate your work, by writing your own scripts (we use Python and JavaScript)
• You love learning new techniques and getting experience in new fields

We’d especially love to hear from you if you:

• You have worked with researchers before, ideally in the security space or have conducted security research yourself
• You have experience PoCing vulnerabilities and dealing with vulnerability disclosures
• You have worked closely with Data Scientists in the past and have experience working with ML