Bright Data is hiring a fully remote Security Researcher (USA) to simulate advanced adversaries against its web data collection platform: reverse engineering anti-bot/fingerprinting systems, researching blocking tools, and building HTTP client solutions to keep data collection working at scale. Core skills: HTTP/TLS protocol expertise, 5+ years R&D/security research, programming (JS/TS/Python/C++)
As a Security Researcher you will focus on simulating our most advanced adversaries against our data collection products affecting thousands of customers.
You will acquire significant knowledge of the web application security field, building new machine learning data collection methods and helping to scale the Bright Data collection platform to new levels as our customer base continues to grow.
Why You'll Love It:
You'll be reversing some of the best anti-bot systems on the planet - it doesn't get more cutting-edge than this.
You'll have a real say in the projects you're part of - this isn't a "just execute" kind of role.
You can actively shape the way this team works - it's still being built, and your fingerprints will be on it.
Got an idea? You can take it straight to the COO - no red tape, no politics.
The people make it - SecRes and Bright Data are genuinely great teams to be part of.
*Fully remote position*
Responsibilities
Conducting in-depth research on tools or services that prevent the free collection of public web data.
Building and improving HTTP client solutions to guarantee the success of Bright's Data collection efforts.
Identifying new standards and technologies that could impact our data collection capabilities.
Reverse engineering adversary solutions to prevent fingerprinting solutions from stopping us.
There’s much more…
Requirements
5+ years experience as an R&D developer / researcher / tester
A deep understanding of HTTP & TLS protocols
Fluent English
Experience working at an anti-bot or web security company – a major advantage
Experience with at least 2 of the following:
Programming experience in JavaScript /TypeScript / Python / C++
Penetration testing experience or offensive security certificates (OSCP, OSEP etc.)
Professional security research experience (such as web vulnerabilities, mobiles apps etc.)