About this role
Sr Staff PSIRT Engineer
100% Remote work
PST preferred timezone
(Backfill Position)
Job Responsibilities:
- Technical investigation of reported security vulnerabilities, including reproduction, impact analysis, and severity scoring (CVSS).
- Drive root cause analysis for reported vulnerabilities and partner with product engineering teams to develop and validate remediations.
- Proactively collaborate and ensure alignment with product, engineering, legal, privacy, and threat intelligence teams on vulnerability response strategies.
- Engage with customers and security researchers to discuss vulnerability details, mitigation steps, and disclosure timelines.
- Maintain deep familiarity with industry vulnerability handling standards and organizations such as CNA, NIST, and FIRST.
- Contribute to the continuous improvement of PSIRT workflows, automation, and tooling to simplify and accelerate vulnerability response.
- Perform hotseat duties.
- Draft and publish security advisories.
Requirements:
- Strong expertise in reverse engineering, debugging, and secure software development practices.
- Demonstrated ability to reproduce, analyze, and assess the exploitability of complex vulnerabilities in large-scale systems.
- Deep familiarity with CVSS, CVE, and public vulnerability databases.
- Automation and scripting experience (e.g., Python, Go, Bash, or PowerShell) to develop internal tooling and automate vulnerability triage workflows.
Education:
- BS or MS Degree in Computer Science, Engineering, or Cybersecurity.
- 4+ years of experience in product security, application security, or vulnerability research.
This is a remote position.
Tired of cold applications?
Sign up with Clera and we'll reach out the moment a role actually fits you — no more spraying applications into the void.
Know someone who'd be great for this?