Senior Security Consultant
Summary
Senior Security Consultant analyzes open-source software vulnerabilities, validates findings, and performs threat modeling to assess risks in codebases using C/C++, Go, Java, and Python.
Senior Security Consultant (OSS Vulnerability Triage & Risk Calibration)
Senior Security Consultant – Open Source Vulnerability Research & Triage
• 5+ years of hands-on experience in Application Security, Vulnerability Research, Penetration Testing, Product Security, or Secure Software Engineering.
• Proven experience in Open Source Software (OSS) Security Assessment and Vulnerability Analysis.
________________________________________
Key Responsibilities
Vulnerability Analysis & Validation
• Analyze and investigate security findings generated by automated vulnerability scanners.
• Differentiate genuine vulnerabilities from false positives, informational findings, and AI-generated hallucinations.
• Perform root cause analysis of identified vulnerabilities.
• Validate exploitability and business impact of reported issues.
Threat Modeling & Security Assessment
• Develop project-level threat models for OSS repositories.
• Identify attack surfaces, trust boundaries, and security risks.
• Evaluate security implications within the broader application ecosystem.
• Apply risk-based security evaluation methodologies.
• Document triage decisions and vulnerability classifications.
• Contribute to the creation of golden datasets for AI model training and benchmarking.
• Provide feedback to improve automated vulnerability detection systems.
________________________________________
Required Technical Skills
Strong code review and debugging capabilities in:
• C/C++
• Go
• Java
• Python
Additional scripting capability in Bash or equivalent preferred.
