Senior Security Consultant

Senior Security Consultant (OSS Vulnerability Triage & Risk Calibration) Senior Security Consultant – Open Source Vulnerability Research & Triage • 5+ years of hands-on experience in Application Security, Vulnerability Research, Penetration Testing, Product Security, or Secure Software Engineering. • Proven experience in Open Source Software (OSS) Security Assessment and Vulnerability Analysis. ________________________________________ Key Responsibilities Vulnerability Analysis & Validation • Analyze and investigate security findings generated by automated vulnerability scanners. • Differentiate genuine vulnerabilities from false positives, informational findings, and AI-generated hallucinations. • Perform root cause analysis of identified vulnerabilities. • Validate exploitability and business impact of reported issues. Threat Modeling & Security Assessment • Develop project-level threat models for OSS repositories. • Identify attack surfaces, trust boundaries, and security risks. • Evaluate security implications within the broader application ecosystem. • Apply risk-based security evaluation methodologies. • Document triage decisions and vulnerability classifications. • Contribute to the creation of golden datasets for AI model training and benchmarking. • Provide feedback to improve automated vulnerability detection systems. ________________________________________ Required Technical Skills Strong code review and debugging capabilities in: • C/C++ • Go • Java • Python Additional scripting capability in Bash or equivalent preferred.