About the company
This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Senior Security Operations Engineer based in Netherlands.
Responsibilities
- Build and maintain production-ready security checks and detection content with a focus on accuracy, broad coverage, and low false-positive rates.
- Develop new detection rules, primarily using OpenGrep, to identify novel malware and vulnerability patterns.
- Research vulnerability classes, exploitation techniques, and emerging attack patterns and translate findings into effective production detections.
- Extend analysis capabilities to support additional programming languages and evolving application technologies.
- Triage analysis pipeline packages, investigate findings, and validate detection results.
- Develop attack-chain templates that combine lower-severity findings into higher-impact security scenarios.
- Create and maintain evaluation harnesses, benchmarks, and testing frameworks.
- Investigate difficult or ambiguous findings and help maintain consistent detection quality.
- Experiment with new security tools and techniques for detecting threats and malware at scale.
- Monitor developments in application security, offensive security, AI security, LLM vulnerabilities, agentic systems, and MCP ecosystems.
- Collaborate with engineering, product, AI/ML, and infrastructure teams.
- Integrate detection, testing, and validation into cloud-native and CI/CD development environments.
Requirements
- 5+ years of experience in offensive security or application security research, or equivalent experience, with a relevant bachelor's degree plus 2 years of experience.
- Broad programming knowledge, with strong JavaScript skills required and Python highly desirable.
- Strong understanding of vulnerability classifications, exploitation techniques, and common software weakness taxonomies.
- Experience writing detection logic for DAST scanners, fuzzers, or comparable security systems.
- Hands-on web application penetration testing experience covering OWASP Top 10 vulnerabilities, authentication, authorization, business logic, REST, GraphQL, and related application security areas.
- Ability to research complex technical problems and work with algorithms and concepts such as Abstract Syntax Trees (ASTs).
- Experience building or maintaining testing frameworks, evaluation harnesses, or automated validation systems is highly valued.
- Familiarity with offensive security tools such as Burp Suite, sqlmap, nmap, ffuf, and custom payload-generation techniques.
- Understanding of HTTP and modern web protocols.
- Familiarity with cloud infrastructure, containers, CI/CD, and modern DevOps practices is advantageous.
- Fluent English communication skills.
- OpenGrep or Semgrep experience, static analysis expertise, production system development experience, or exposure to LLMs and prompt engineering are advantageous.
- Security research contributions such as CVEs, advisories, technical talks, open-source tools, or technical writing experience are a plus.
- YARA experience is also beneficial.
Conditions
- Fully remote working options.
- Health, pension, and statutory benefits tailored to the employee's country of residence.
- 24/7 Employee Assistance Program.
- Quarterly Thrive-Wellness Days.
- 5 days of paid volunteer time off each year.
- Paid birthday day off.
- Employee recognition and rewards programs.
- Opportunities for personal and professional growth and development.
- Flexible, globally oriented Total Rewards approach.
- Inclusive and collaborative environment.