Senior Security Researcher
About The Position
Lead the development of product features and detection capabilities, such as payload signal collection and launch ad fraud detection techniques utilizing those signals in order to identify different forms of Invalid Traffic (IVT) in mobile and desktop environments. Facilitate research into new and emerging threat models within the Ad Tech Ecosystem, as well as new environments and types of advertising that are potential vectors of abuse. For example, by finding new days to detect tools like Selenium, Playwright, or Puppeteer. Answer the technical questions, such as: How is an actor obfuscating the redirect between one page to another? How is a data center pretending to be a desktop browser? Which page elements are being tampered with and why? What javascript evidence can we find that automation was occurring? Keep up on industry standards, techniques, cybersecurity trends, and tools adversaries might use to circumvent detection or mitigation. Red team, experiment, and develop new tactics for various kinds of fraud and to bypass our detection, no need to wait for an attack to be discovered and used by adversaries first. Regularly up-level the broader team’s knowledge of signals and techniques useful for identification of invalid traffic, ad fraud, or automation, such as by leading signal sharing sessions with the rest of the team.
Requirements
- Passionate about finding bad actors and disrupting their techniques
- Knowledgeable on the mechanics of fraud and abuse within Ad Tech and the programmatic ecosystem OR knowledgeable on the cybersecurity threat landscape
- Extensive knowledge of how the internet operates
- Clear understanding of DNS, TCP/HTTP/TLS network protocols
- Understanding of the capabilities of javascript signal collection
- Willingness to dig into the details of source code
- Proven experience in scripting languages (Python and JavaScript)
- Curious, adaptable person who is always thinking out of the box
- Intrigued by the adversarial game, discovering new threats, and rapid experimentation
- Strong sense of ownership
- Accountable for the quality and accuracy of work
- Passionate about learning and growing skillset and the skillset of those around you
- Comfortable juggling different projects as priorities change
Nice To Haves
- Bonus Points for SQL
- Knowledge on how to use AI tools effectively or improve, automate, and “agent-ize” existing processes
Responsibilities
- Lead the development of product features and detection capabilities
- Launch ad fraud detection techniques utilizing payload signal collection
- Identify different forms of Invalid Traffic (IVT) in mobile and desktop environments
- Facilitate research into new and emerging threat models within the Ad Tech Ecosystem
- Research new environments and types of advertising that are potential vectors of abuse
- Find new ways to detect tools like Selenium, Playwright, or Puppeteer
- Answer technical questions regarding obfuscation, data center impersonation, page element tampering, and javascript evidence of automation
- Keep up on industry standards, techniques, cybersecurity trends, and tools adversaries might use to circumvent detection or mitigation
- Red team, experiment, and develop new tactics for various kinds of fraud and to bypass our detection
- Regularly up-level the broader team’s knowledge of signals and techniques useful for identification of invalid traffic, ad fraud, or automation
- Lead signal sharing sessions with the rest of the team
Benefits
- well-being and learning stipends
- flexible work options
- dedicated time off
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
Education Level
No Education Listed
