Security scanner Engineer

About the role

You'll help build and validate safe, reliable scanner capabilities while ensuring accurate asset attribution, quality evidence, and strong false-positive control. This role focuses on controlled, authorized, and non-intrusive security assessment. The project does not involve exploitation, credential guessing, denial-of-service activity, or unauthorized target probing.

Key responsibilities

• Build and configure passive discovery and controlled scanning workflows
• Work with tools such as Subfinder, dnsx, httpx, Naabu, Nuclei, and OWASP ZAP
• Develop DNS, TCP, HTTP, TLS, configuration, and signature-based scanning profiles
• Implement asset attribution, probeability, scope-control, and rate-limit rules
• Curate, test, pin, and document scanning tools and templates
• Validate findings, improve evidence quality, and reduce false positives
• Ensure scanning activities remain within approved, non-intrusive assessment boundaries
• Review tool updates, dependencies, licenses, and security implications
• Support pilot testing, troubleshooting, and scanner incident investigations

About you

• Senior-level cybersecurity engineering experience
• Background in vulnerability scanning, attack-surface management, reconnaissance, or exposure management
• Strong knowledge of DNS, TLS, HTTP, TCP services, and subdomain discovery
• Hands-on experience with Nuclei, Subfinder, dnsx, httpx, Naabu, OWASP ZAP, or comparable tools
• Strong understanding of false positives, evidence quality, rate limiting, and scope control
• Comfortable with scripting/programming and Linux/containerized environments
• Strong documentation and communication skills