Position: Security Research Engineer
Company: Scalarr
Category: Security
Experience required: 2y
English level: intermediate

Scalarr was founded in 2017, and currently has two products under its umbrella: antifraud solution for mobile, and autonomous cybersecurity solution for Edge and IOT environments. We are a 100% remote distributed team located in the US, Ukraine, Mexico, Croatia, Poland, Canada. Scalarr is a VC-backed company by OTB Investors, Speedinvest, EBRD and TMT Investments.  

You will be responsible for innovating new features and techniques that bring advanced network visibility, early threat detection, and automated incident response in the Edge and IOT  environment. You will work closely with the Data Analytics, Data Science, and Development teams. 

For security-driven tasks and challenges that will keep you engaged and motivated, read the description below.

- Perform research, analysis, design, testing and implementation of medium to complex Edge and IOT network security and protection technologies.
- Act as professional ethical penetration tester utilizing hacking tools to modify or create proof of concept exploits that mimic techniques of attackers to identify vulnerabilities and associate with a severity rating by deriving impact and ease of exploit in Linux based edge and IoT environments
- Review and analyze security vulnerabilities for the customers’ Edge and IoT networks, application systems, hardware infrastructure and emerging technologies to improve the enterprise information security posture.
- Perform and design security incident response activities and technical investigations of information security related incidents to help train autonomous Cyber AI.
- Perform tests on networking devices, appliance products and web based application
- Present recommendations to the line of business on the inherent risks, providing meaningful mitigation strategies.
- Collaborate and consult with peers, colleagues and managers to resolve product issues and achieve goals.
- Help build the security R&D Department from a scratch. Provide guidance and leadership to other security researchers and act as a mentor for these engineers.

Required Qualifications:
- 2+ years of Cyber Security Research experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education.
- Hands-on experience in pentesting and hacking. 
- Solid knowledge of the TCP/IP stack and networking technologies. 
- Basic knowledge of security issues associated with containers, Kubernetes, Distributed Systems, and Linux of large-scale web applications.
- Hands-on programming experience in Python, Golang, Bash, or any other programming language.
- Experience with managing security aspects of cloud infrastructures and applications.
- Knowledge of the MITRE ATT&CK framework and Cyber Kill Chain.
- Experience building IoT/OT, Edge, and network security solutions.
- Strong knowledge of IoT cloud networking architecture, cloud operations, security, automation, and orchestration.

Desired Qualifications:
- Knowledge and understanding of vulnerability identification and remediation.
- Strong analytical skills with high attention to detail and accuracy.
- Knowledge and understanding of information security industry standards and government regulations.

What we can suggest: 
- Unique working experience on an Autonomous Cyber AI solution for Edge and IoT environments.
- Perspective to grow to Head of Security R&D Dept within 1 year with the option pool of C-level.
- Competitive salary.
- All other perks and benefits.