Senior Security Consultant

Senior Security Consultant (OSS Vulnerability Triage & Risk Calibration)

Senior Security Consultant – Open Source Vulnerability Research & Triage

• 5+ years of hands-on experience in Application Security, Vulnerability Research, Penetration Testing, Product Security, or Secure Software Engineering.

• Proven experience in Open Source Software (OSS) Security Assessment and Vulnerability Analysis.

________________________________________

Key Responsibilities

Vulnerability Analysis & Validation

• Analyze and investigate security findings generated by automated vulnerability scanners.

• Differentiate genuine vulnerabilities from false positives, informational findings, and AI-generated hallucinations.

• Perform root cause analysis of identified vulnerabilities.

• Validate exploitability and business impact of reported issues.

Threat Modeling & Security Assessment

• Develop project-level threat models for OSS repositories.

• Identify attack surfaces, trust boundaries, and security risks.

• Evaluate security implications within the broader application ecosystem.

• Apply risk-based security evaluation methodologies.

• Document triage decisions and vulnerability classifications.

• Contribute to the creation of golden datasets for AI model training and benchmarking.

• Provide feedback to improve automated vulnerability detection systems.

________________________________________

Required Technical Skills

Strong code review and debugging capabilities in:

• C/C++

• Go

• Java

• Python

Additional scripting capability in Bash or equivalent preferred.