.png){kind=logo}
*This position does not offer work visa sponsorship*
The Vulnerability Researcher is responsible for analyzing systems, software, architectures, and strategies to discover impactful, unknown vulnerabilities and security weaknesses, including those affecting AI/ML systems and AI-enabled technologies and services. This work proactively identifies classes of vulnerabilities and exploitation opportunities that inform mitigation strategies and secure design.
The role involves performing manual source code review, binary analysis, vulnerability assessments, dynamic testing, threat modeling, and security architecture review. The researcher conducts ongoing analysis of real-world adversaries, exploitation methods, and emerging attack surface and offensive security techniques to guide research priorities. Development of custom tooling and automation is required to augment manual vulnerability discovery.
Responsibilities- Conducts research to identify highly impactful, unknown vulnerabilities in a wide variety of applications and technologies, including AI-enabled applications and services
- Performs vulnerability assessments using industry best practices on various environments, including web applications, APIs, and cloud infrastructure
- Develops and manages testing methodologies that adhere to common security guidelines and NIST standards
- Conducts an evaluation of cloud security configurations, identifies prevalent vulnerabilities in cloud security controls, and improves and maintains cloud testing standards
- Provides detailed reports with proof of vulnerabilities, guidance, and advice to support customer teams through vulnerability remediation
- Develops and communicates comprehensive and accurate reports and presentations for client stakeholders including technical staff and executive leadership
- Maintains communication with management regarding development within assigned responsibilities and performs special projects as required
- Researches and develops innovative techniques, tools, and methodologies for vulnerability research and red team activities
- Develops leadership-level communications, including management-specific metrics, white papers, procedures, thought position papers, etc.
- This list is not all-inclusive, and you are expected to perform other cybersecurity-congruent duties as requested or assigned
- 7+ years of professional work experience in the cybersecurity industry with Bachelor’s degree in Computer Science, Management Information Systems, or a related field, or equivalent work experience.
- Understanding of all phases of adversary emulation operations, including reconnaissance, social engineering, exploitation, post-exploitation, covert techniques, lateral movement, and data exfiltration.
- Extensive experience in offensive cybersecurity roles, such as red teaming, penetration testing (e.g., web, infrastructure, cloud), and purple team exercises across cloud and on-prem environments.
- Robust understanding of contemporary security theory, application exploitation techniques, and attack vectors, including the vulnerability lifecycle and scanning methodologies (SAST, DAST, IAST, RASP).
- Experience developing and managing testing methodologies that adhere to common security guidelines such as OWASP and frameworks such as NIST 800 or MITRE ATT&CK.
- Solid understanding of computer architecture and organization with respect to binary analysis and exploitation.
- Ability to analyze, create, and debug shellcode and other low-level exploits.
- Experience developing custom security software (offensive or defensive) in one or more compiled languages.
- Demonstrated ability to reverse engineer binaries, enumerate vulnerabilities in compiled software, and provide working exploits (e.g., CVEs, public acknowledgements, or the ability to demonstrate on demand).
- Familiarity with automated security analysis and fuzzing tools (e.g., AFL and Peach).
- Demonstrated ability to discover vulnerabilities via static analysis and source code review.
- Working understanding of key programming languages and frameworks (e.g., Java, Node.js, Python, JSP), including the ability to quickly learn new languages, understand their security implications, and enumerate vulnerabilities in custom-developed software packages.
- Familiarity with scripting and programming in Python, PowerShell, or C#, with the ability to create and customize tools.
- Excellent written and verbal communication skills, including technical writing, documentation development, process mapping, and visualization.
- Ability to communicate technical concepts effectively to both technical and non-technical audiences across various roles and levels.
- Strong analytical and problem-solving skills, with the ability to examine issues strategically and analytically.
- Ability to interact effectively with co-workers and external contacts and work collaboratively in a team environment.
- Ability to manage multiple simultaneous initiatives and prioritize workload to meet commitments.
- Self-motivated with a strong sense of urgency, an adaptive mindset, and a demonstrated ability to learn quickly.
Base Pay Information
The national base pay range at the end is a good-faith estimate of what Delta Dental may pay for new hires. Actual pay may vary based on Delta Dental’s assessment of the candidate’s knowledge, skills, abilities (KSAs), related experience, education, certifications, and ability to meet required minimum job qualifications. Other factors impacting pay include prevailing wages in the work location and internal equity.
Pay Grade 25. $142,077 - $307,899
- Competitive base and incentive pay
- 401(k) with robust matching and non-matching contributions
- Rich medical & pharmacy benefits
- 100% employer-paid dental and vision benefits
- Holistic wellbeing program with deep financial incentives
- Generous paid time off plus 12 paid holidays and your birthday off
- Culture of growth and learning: career development; tuition reimbursement; recognition program
- Family support: adoption assistance, fertility treatment, child, elder & pet care assistance
- Social responsibility and volunteer opportunities
- Employee discount program
Skills Required
- 7+ years of professional cybersecurity industry experience, with a bachelor's degree in Computer Science, Management Information Systems, a related field, or equivalent work experience.
- Understanding of all phases of adversary emulation, including reconnaissance, social engineering, exploitation, post-exploitation, covert techniques, lateral movement, and data exfiltration.
- Extensive offensive cybersecurity experience, including red teaming, web, infrastructure, and cloud penetration testing, and purple team exercises across cloud and on-premises environments.
- Strong understanding of security theory, application exploitation techniques, attack vectors, vulnerability lifecycles, and SAST, DAST, IAST, and RASP methodologies.
- Experience developing and managing testing methodologies aligned with OWASP, NIST 800, or MITRE ATT&CK frameworks.
- Strong understanding of computer architecture and organization for binary analysis and exploitation.
- Ability to analyze, create, and debug shellcode and low-level exploits.
- Experience developing custom offensive or defensive security software in one or more compiled languages.
- Ability to reverse engineer binaries, identify vulnerabilities in compiled software, and provide working exploits or documented vulnerability acknowledgements.
- Familiarity with automated security analysis and fuzzing tools such as AFL and Peach.
- Ability to discover vulnerabilities through static analysis and source-code review.
- Working knowledge of Java, Node.js, Python, JSP, and related frameworks, with the ability to learn new languages and assess their security implications.
- Familiarity with scripting and programming in Python, PowerShell, or C#, including creating and customizing tools.
- Excellent written and verbal communication, technical writing, documentation, process mapping, and visualization skills.
- Ability to communicate technical concepts effectively to technical and non-technical audiences.
- Strong analytical and problem-solving skills.
- Ability to collaborate effectively with coworkers and external contacts.
- Ability to manage multiple simultaneous initiatives and prioritize workload.
- Self-motivation, urgency, adaptability, and ability to learn quickly.
Delta Dental Insurance Company Compensation & Benefits Highlights
The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about Delta Dental Insurance Company and has not been reviewed or approved by Delta Dental Insurance Company.
-
Retirement Support — Retirement support is positioned as a standout element, including a sizable automatic 401(k) contribution plus additional matching. This boosts overall total-rewards value even when base pay is viewed as only mid-market in some areas.
-
Affordable Benefits — Core coverage is framed as unusually low-cost to employees, including fully employer-paid dental and vision and low employee contribution medical options. This creates meaningful take-home value beyond cash compensation.
-
Leave & Time Off Breadth — Time-off offerings are described as generous, including broad PTO/holidays and additional paid leave features such as parental leave. These policies increase perceived rewards and help balance workload demands.
Delta Dental Insurance Company Insights
What We Do
At Delta Dental, we’re behind millions of smiles and counting. For over 68 years, we’ve served our communities by increasing access to affordable, quality care – but that commitment to care extends beyond the people we serve, to the dedicated employees who make those smiles genuine. We've come this far by building programs that offer opportunities for advancement, create meaningful connections, and improve the lives of our employees and their families. Because we know that when we take exceptional care of each other, we can make a positive impact for all. We champion an inspirational workplace through our commitment to trust, service, excellence and innovation. Joining us means working for a company that offers stability and balance, opportunities for leadership at all levels, and a work environment. Delta Dental of California, Delta Dental of New York, Inc., Delta Dental of Pennsylvania, and Delta Dental Insurance Company are members, or affiliates of members, of the Delta Dental Plans Association, a network of 39 Delta Dental companies throughout the country. Together with our affiliate companies, form one of the nation’s largest dental benefits delivery systems, covering over 31 million enrollees. Headquartered in San Francisco, we are members of the Delta Dental Plans Association, a network of companies that provides dental coverage to 80 million people. Delta Dental provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, sex, national origin, age, disability or genetics. In addition to federal law requirements, Delta Dental complies with applicable state and local laws governing nondiscrimination in employment in every location in which the company has facilities. This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation and training.
