_(1).png?1650476058){kind=logo}
Our vision is to eradicate cybercrime. Today, Censys is making headway on this vision through our mission of helping companies identify, inventory, prioritize and remediate risks related to their attack surface. Our platform has a foundation in nearly a decade of academic research on large scale internet scanning. Our technology ingests billions of data points on devices, certificates, domains and websites daily, to provide our customers with unparalleled view into the darkest corners of their inventory. Censys was listed in Crain’s 2020 Best Places to Work. We offer flexible remote work arrangements to help people balance work and family life.
We’re looking for a Director of Research to lead Censys’ research initiatives. Born out of the research community, Censys believes in continually working to better understand how the Internet functions, to use our data to uncover new types of vulnerabilities, and to use Internet data to guide our product roadmap. As part of this role, you’ll be responsible for leading our research organization, including driving and owning all research deliverables (e.g., publications, talks, blog posts), engaging with the research community and press media, overseeing our rapid response and vulnerability disclosure programs, and supporting a guild of research and data scientists embedded across the organization.
What you’ll do
- Lead a small dedicated team of security researchers, data scientists, and engineers to produce novel security and Internet measurement findings
- Partner with Marketing to deliver new external content (e.g., blog posts that describe new vulnerabilities we’ve uncovered, an annual Internet Censys report, webinars that discuss new security trends)
- Act as a public face for our research program. Engage with the cybersecurity community in social media and industry events, representing and/or promoting Censys. Identify and submit proposals for speaking engagements to industry events such as Black Hat, DEFCON, and BSides)
- Drive our rapid response program, which is responsible for tracking new vulnerabilities, developing and deploying fingerprints, producing original content and engaging with media to describe how the Internet is affected. Drive responsible disclosure program for uncovered vulnerabilities
- Work with and influence Product and Engineering — particularly teams responsible for Internet data collection, asset attribution, and risk discovery — to ensure that we are surfacing practical security insights. Provide security expertise to internal teams.
- Build and maintain a guild of researchers embedded across the research, product, and engineering organizations
What you need
- 2+ years Leading a Security Research organization
- 8+ years experience in the security industry, preferably with experience as a security practitioner or researcher
- Demonstrated experience producing written security research, giving public talks, and engaging with the broader research community
- A strong understanding of networking, reconnaissance (mapping a company attack surface) approaches & tools, common cybersecurity flaws and how to exploit them.
- Past experience speaking at industry events, or strong desire to build this skillset
- A passion for continuous learning and curiosity
