安全研究员 - 机器人检测对抗研究 - 美国
Security Researcher - Bot Detection Adversarial Research - USA
职位描述
作为安全研究员，你将专注于模拟我们最先进的对手，针对影响数千客户的我们的数据收集产品进行测试。
你将深入了解网络应用安全领域，构建新的机器学习数据收集方法，并帮助将Bright Data数据收集平台扩展到新的高度，随着客户基础的持续增长。
为什么你会喜欢它：
- 你将逆向一些世界上最先进的反机器人系统——这不会比这更前沿了。
- 你将对参与的项目有真正的发言权——这不是一个“只需执行”的角色。
- 你可以积极塑造这个团队的工作方式——它仍在建设中，你的痕迹将体现在其中。
- 你有想法？你可以直接向首席运营官提出——没有繁文缛节，没有政治。
- 人们让这里变得出色——SecRes和Bright Data是真正值得加入的团队。
*全远程职位*
职责
- 对阻止自由收集公开网络数据的工具或服务进行深入研究。
- 构建和改进HTTP客户端解决方案，以确保Bright数据收集工作的成功。
- 识别可能影响我们数据收集能力的新标准和技术。
- 逆向分析对手解决方案，防止指纹识别解决方案阻止我们。
- 还有很多其他内容…
要求
- 5年以上R&D开发人员/研究人员/测试人员经验
- 对HTTP和TLS协议有深入理解
- 英语流利
- 在反机器人或网络安全公司工作过的经验——是一个重大优势
至少具备以下两项经验：
- JavaScript / TypeScript / Python / C++编程经验
- 渗透测试经验或进攻性安全证书（如OSCP、OSEP等）
- 专业安全研究经验（如网页漏洞、移动应用等）
- 逆向工程技能（JS去混淆或二进制逆向）/恶意软件分析
- 反机器人开发或其他类似产品，如WAF、反病毒开发（恶意软件模拟等）、DDoS防护等
最初发布于喜马拉雅山
查看英文原文
Description
As a Security Researcher you will focus on simulating our most advanced adversaries against our data collection products affecting thousands of customers.
You will acquire significant knowledge of the web application security field, building new machine learning data collection methods and helping to scale the Bright Data collection platform to new levels as our customer base continues to grow.
Why You'll Love It:
- You'll be reversing some of the best anti-bot systems on the planet - it doesn't get more cutting-edge than this.
- You'll have a real say in the projects you're part of - this isn't a "just execute" kind of role.
- You can actively shape the way this team works - it's still being built, and your fingerprints will be on it.
- Got an idea? You can take it straight to the COO - no red tape, no politics.
- The people make it - SecRes and Bright Data are genuinely great teams to be part of.
*Fully remote position*
Responsibilities
- Conducting in-depth research on tools or services that prevent the free collection of public web data.
- Building and improving HTTP client solutions to guarantee the success of Bright's Data collection efforts.
- Identifying new standards and technologies that could impact our data collection capabilities.
- Reverse engineering adversary solutions to prevent fingerprinting solutions from stopping us.
- There’s much more…
Requirements
- 5+ years experience as an R&D developer / researcher / tester
- A deep understanding of HTTP & TLS protocols
- Fluent English
- Experience working at an anti-bot or web security company – a major advantage
Experience with at least 2 of the following:
- Programming experience in JavaScript /TypeScript / Python / C++
- Penetration testing experience or offensive security certificates (OSCP, OSEP etc.)
- Professional security research experience (such as web vulnerabilities, mobiles apps etc.)
- Reverse engineering skills (JS de-obfuscation or binaries reversing) / malware analysis
- Anti-bot development or other similar products, such as WAF, Anti-Virus development (malware emulation etc.), DDoS prevention etc.
Originally posted on Himalayas