Junior Security Researcher

At JFrog, we’re reinventing DevOps to help the world’s greatest companies innovate -- and security is a core part of our mission. Our team of industry-leading software security experts are true pioneers, constantly pushing the boundaries with original research and technology innovation. JFrog is a special place with a unique combination of brilliance, spirit and just all-around great people. Thousands of customers, including the majority of the Fortune 100, trust JFrog to manage, accelerate, and secure their software delivery from code to production -- a concept we call “liquid software.” Wouldn't it be amazing if you could join us in our journey?

JFrog Security is one of the main pillars of the JFrog offering and long-term strategy. We are pushing the boundaries of security analysis of both binaries and code, shifting left and bringing new and exciting features to both developers and DevOps. We are looking for a Junior Security Researcher to join the team. As a researcher, you will perform security research on open and closed-source projects, both in web technologies and low-level technologies. Define how to identify exploitable security issues in an automated manner and develop code for that purpose.

As a Junior Security Researcher in JFrog you will...

• Research CVEs and 1-day vulnerabilities in various programming languages and ecosystems
• Define how to automatically find exploitable vulnerabilities & develop code that identifies the instances where a vulnerability is exploitable
• Perform security configuration research on various open source technologies, frameworks, and libraries
• Write technical reports regarding all research subjects mentioned above

To be a Junior Security Research in JFrog you need...

• Familiarity with security vulnerabilities & mitigation techniques
  • Ex. Stack overflow, Command injection, ASLR
• 1+ years of programming experience in Python
• Experience with penetration testing and/or 0-day vulnerability research - An advantage