Cyber Security Researcher

What We Do At Detectify We’re Detectify, and we’re not your average cybersecurity company. We’re a team obsessed with building cutting-edge tech that actually makes a difference in making the internet a safer place. We’re talking about real-life hackers who know their stuff. You'll learn from the best and join a team that combines human ingenuity with automation to streamline asset discovery and vulnerability assessments.

What You’ll Get To Do As a Security Researcher, your main mission is to develop proof-of-concepts for novel ways of detecting vulnerabilities, broadening what Detectify’s engines can find. In other words, your research ends up protecting thousands of real-world attack surfaces.

Other Responsibilities Include

• Stay on top of the latest security research, disclosures and techniques, and figure out which ones we can and should turn into scalable detection.
• Research new attack vectors and vulnerability classes that can be automated, and identify where we can source them.
• Design and build agentic workflows that use AI to uncover new vulnerabilities and 0-days.
• Reverse engineer binaries to find vulnerabilities and understand how they can be exploited.
• Review detection code to make sure our tests are accurate and keep false positives to a minimum.
• Act as a go-to security expert for colleagues across the company and help with security-related questions and tasks.
• Talk with customers to understand their attack surfaces and security challenges, and use those insights to shape what we research and build next.

Who you are

• You’re highly versatile and self-motivated, and you can create and drive change. You’re active in the security community and you understand how vulnerabilities work, not just that they exist. You probably also have:
• Hands-on experience finding and exploiting live vulnerabilities, for example through bug bounty programs, CVEs, CTFs, penetration testing or published research.
• Deep knowledge of web application security and common vulnerability classes (OWASP Top 10 and beyond).
• Solid programming or scripting skills (for example Python or Go) and the ability to turn an idea into a working proof-of-concept.
• Curiosity about using LLMs and AI agents in offensive security, or experience building with them already.
• The ability to explain technical findings clearly to engineers, customers and non-security stakeholders.

Bonus points if you:

• Have experience with reverse engineering.
• Have publicly disclosed vulnerabilities, written blog posts or given talks at security conferences.

What’s in it for you? Hybrid work This position is for the Stockholm office. We offer hybrid working, with access to our office in central Stockholm and would like to see you at the office at least 3 days per week

So, what do you think? We are proud to foster an inclusive workplace free from discrimination. We strongly believe that diversity of experience, perspectives, and background will lead to a better environment for our employees and a better product. This is something we value deeply and we encourage everyone to be a part of changing the way the world thinks about security! Go hack yourself!