Senior Security Operations Engineer; Europe Remote

Location:

Open to candidates residing anywhere in Europe, time zones (CET ± 2 hours)

Delivering the industry’s most accurate application security platform, Invicti Security has been transforming the way web applications are secured for nearly 20 years. Recognized as a leader in Application Security Testing and a DAST Innovator by Latio, Invicti enables organizations to continuously scan and secure their web apps and APIs with the rigor of runtime testing and the speed of constant innovation.

Headquartered in Austin, Texas, Invicti serves more than 3,600 organizations worldwide. Invicti serves more than 3,600 organizations worldwide. To learn more, visit  or follow us on Linked In.

You are a hands-on offensive security researcher who enjoys turning vulnerability and malware knowledge into detection content that ships. You take ownership of the security checks you build, write clean and accurate detection rules, and care deeply about quality and low false-positive rates. You have strong opinions that are loosely held, apply established research principles in your day-to-day work, and help ensure our security checks deliver solid results for our customer base.

• Build and maintain security checks and detection content that ship as part of the Invicti platform, with a focus on accuracy, coverage, and low false-positive rates.
• Create new detection rules (primarily Open Grep) to catch novel malware and vulnerability patterns and improve detection accuracy.
• Research vulnerability classes, exploitation techniques, and emerging attack patterns, and translate them into production-ready detections.
• Extend support for new programming languages across our analysis pipeline.
• Triage packages from our analysis pipeline and validate findings.
• Build attack chain templates that combine low-severity findings into higher-impact detection scenarios.
• Contribute to evaluation harnesses and benchmarks that measure detection effectiveness — false-positive rates, coverage, and accuracy.
• Build and maintain testing frameworks that validate detection quality, exploit reproducibility, and regression coverage.
• Help maintain detection quality across the platform, including triaging difficult or ambiguous findings.
• Apply established detection and exploitation principles, and help refine our internal standards and methodologies.
• Explore and experiment with new tools and techniques to detect threats and malware at scale.
• Stay current on App Sec, offensive security, AI security, LLM vulnerabilities, AI agent security, MCP security, and emerging attack techniques, and apply those insights to detection engineering.
• Collaborate across engineering, product, AI/ML, and infrastructure teams to ship and operate detection content.
• Work with cloud-native infrastructure and CI/CD pipelines to integrate detection, testing, and validation into the development lifecycle.

• 5+ years of offensive security or application security research experience (Bachelor's + 2 years, or equivalent).
• Broad knowledge of programming languages — JavaScript is a must, Python is a huge plus.
• Strong understanding of vulnerability classifications, exploitation techniques, and common software weakness taxonomi
• Working knowledge of detection writing for DAST scanners, fuzzers, or comparable systems — including detection logic, response interpretation, and false-positive management.
• Hands-on web application pentesting experience covering the OWASP Top 10 and adjacent classes — authentication, authorization, business logic, modern API surfaces (REST, GraphQL).
• Comfortable researching and tackling hard problems and algorithms (e.g., parsing with ASTs).
• Experience building or maintaining testing frameworks, evaluation…