Head of Security Research

Security research is at the core of what we do. The head of security research will lead a global team of expert researchers and data scientists to continuously improve the depth, breadth and accuracy of our application security testing findings.

Key functions of this group are as follows:

• Design techniques for new detecting software vulnerabilities 
• Prototype new detection algorithms and work with engineering to implement research findings into the product 
• Develop methodology for accurately rating the risk posed by vulnerabilities
• Create forward looking roadmap with Product Management and Architecture leadership
• Contribute to Invicti’s customer facing product documentation
• Create original content for Invicti’s blog, trade magazines, webinars, etc.

Key responsibilities for the role:

• Manage, grow and mentor a high performing team and provide technical guidance to researchers and data scientists
• Set the strategic direction for the team. Set annual and quarterly goals that align with business needs. Prioritize and manage the backlog of research.
• Ensure that Invicti stays on the leading edge of security research and that our product is first to market with coverage of zero days
• Create and execute plan to leverage our data to improve and prioritize findings, including creating a risk score
• Actively track impact of the teams work on the accuracy and actionability of our findings
• Actively participate in the security community by attending and presenting at industry conferences and publishing original research
• Partner closely with the head of product management to set strategy for existing products and identify opportunities for new offerings
• Actively participate in our customer community as an evangelist and security expert

Key Skills

• 7 years experience as a security researcher with 3 years experience leading teams of security researchers and data scientists in a cyber security product company 
• Deep understanding of application security, malware analysis, and cloud security
• Executive presence. Great communication skills, both written and spoken. Ability to take complex issues and convey them to a business audience
• Passion for making the world more secure. Active participant in the global cybersecurity industry, engaging with other experts at conferences or on line forums. 
• Deep customer focus. Ability to understand customer problems and rapidly prototype solutions to those problems.

Nice to have:

• Experience using, deploying, or customizing commercial application security products (e.g. SAST, DAST, IAST technologies)
• Experience with application and vulnerability risk scoring