[Hiring] Lead Vulnerability Intelligence Analyst @Intel 471

Role Description

You own the technical depth of our vulnerability intelligence practice. When a new CVE drops, you're the person who determines what's actually true and decides what our customers should do about it.

This is a team lead role where you'll set the technical standard for how we validate, assess, and communicate vulnerability risk. You'll also build and maintain the tooling that lets a small team cover the ever-growing world of vulnerability research.

What You'll Do:

• Design, build, and deploy honeypot systems to monitor for exploitation activity.
• Acquire, test, and validate proof-of-concept exploits in virtual environments to confirm or refute claims about exploitability.
• Develop practical mitigations for cases where patching is delayed, impossible, or insufficient, including:
  • Configuration hardening
  • Network segmentation
  • ACLs
  • Disabling features
  • Other controls
• Devise techniques for detecting both attempted and successful exploitation by illuminating the artifacts defenders should hunt for.
• Write vulnerability reports that dive into the details about an exploit, such as how it works, who is using it, and who is being targeted.
• Build and maintain the systems we use to streamline vulnerability assessment and automate triage of vulnerability alerts.

Qualifications

• Validate and test PoCs to verify the validity of exploitation claims.
• Devise mitigation techniques beyond patching.
• Devise techniques for detecting exploit activity, attempted or successful.
• Write vulnerability reports such as Vulnerability Spotlights.
• Identify new sources of vulnerability intelligence.
• Train and mentor junior team members.

Requirements

• Proficiency with at least one programming language (Python, Go, C/C++, or similar) sufficient to read exploit code, modify PoCs, and build tooling.
• Hands-on fluency with virtual machines, containers, and re-usable lab environments for safe detonation and analysis.
• Solid computer science fundamentals.
• Thorough understanding of computing and internet fundamentals: TCP/IP, HTTP, DNS, TLS, authentication and authorization models, and how real systems are actually deployed.
• Demonstrated subject-matter-expert-level depth.
• A working bias toward automation.

Benefits

• Competitive compensation
• Remote-friendly culture
• Wellness programs
• A variety of professional development opportunities
• Inclusive culture focused on people, customers and innovation