Vulnerability Researcher (f/m/d)

What You Will Do Daily:

• Have fun and learn with world-class security enthusiasts that share your passion and interest for web security
• Uncover, discuss, exploit and report critical and complex vulnerabilities in popular open source web applications (see https://www.sonarsource.com/blog/)
• Research new and existing vulnerability types as well as exploitation techniques
• Automate the detection of vulnerabilities in well-known applications by using our best-in-class code analysis technology 
• Share your research and findings with the world-wide community by writing blog posts or presenting at international conferences

The Experience You Will Need:

• You have 3+ years of experience in reviewing source code for critical security vulnerabilities (CTFs do count ;)
• You have a deep understanding of major security vulnerability types, how to spot these in source code, and how to exploit them with different techniques
• You have solid programming skills in at least one of the following languages: Java,  C#, Python or JavaScript
• You are passionate, creative and persistent when auditing new source code and you can think outside the box
• You care about professional and responsible disclosure of security vulnerabilities to the affected vendor
• You are fluent in English, both written and spoken, and are able to explain complex security concepts in a structured and understandable way

Why You Will Love It Here:

• Our culture and mission set us apart. We have a dynamic work culture that values respect and kindness and embraces the right to fail (and get right back up again!). 
• Great people make a great company. We value people skills as much as technical skills and strive to keep things friendly while still being passionate leaders in our domains. 
• We have a flexible work policy that includes 3 days in-office and 2 days work-from-home each week for those located near our office locations; some locations such as Dubai, India, Japan and Australia operate fully remotely.
• We have a growth mindset. We love learning and believe continuous education is critical to our success. In an ever-changing industry, new skills are necessary, and we're happy to help our team acquire them.
• As the leader in our field, our products and services are as strong as our internal team members.
• We embrace transparency with regular meetings, cascading messages and updates on the growth and success of our organization.

Benefits of Working with Sonar:

• Pension Scheme: 1st Pillar (Unterstützungskasse): Automatic, financed by Sonar, 3% of gross salary, an additional benefit in addition to your salary.
• Pension Scheme:2nd Pillar (bAV): Voluntary, 15% contribution by Sonar from social security savings.
• We encourage usage of our robust time-off allocations with 28 PTO days for our employees based out of the Geneva region, plus additional days based on seniority and circumstances.
• Sonar recognizes holidays on working calendar days. If the holiday date occurs on a Saturday, we will recognize the day on the preceding Friday. If the holiday date occurs on a Sunday, we will recognize the day on the following Monday.
• Public transport reimbursement of 60% for annual subscription.
• Global workforce with employees in 20+ countries representing 35+ unique nationalities.
• We have an annual kick-off somewhere in the world where we meet to build relationships and goals for the company.