Security Researcher - Python

• Develop and maintain fingerprints and security plugins derived from publicly available information
• Fetch and aggregate service banners across multiple networking/communication protocols and ports (e.g., HTTP/S, SSH, FTP, SNMP, MQTT, Telnet, SMB) using safe, read-only methods.
• Design robust regular expressions and XML-based rules for fingerprinting and detection.
• Implement concise, well-documented Python plugins to parse banner data and normalize identifying attributes.
• Writing unit and integration tests for fingerprints/plugins into CI/CD pipelines and run automated tests (Jenkins).
• Maintain version control and code review discipline (Git).
• Collaborate with product/security teams via Jira and Git to triage findings, track issues, and roll out updates.
• Use AWS at a basic operational level to deploy and run passive data collection and processing infrastructure.

• Perform data analysis using our custom analytics tool; basic SQL knowledge required to query and validate results.
• Evaluate and responsibly leverage open-source reconnaissance tools for passive discovery and validation; extend tooling where necessary while adhering to non-intrusive usage policies.
• Produce clear technical documentation, including methodology, assumptions, validation steps, and change logs.
  

Required skills & experience

• Demonstrated understanding of networking and communication protocols and their common ports.
• Proficient in Python for writing small plugins, parsers, and automation scripts.
• Basic skills in regular expressions and working knowledge of XML for rule definition.
• Practical experience with Git, Jira, and CI/CD tools (Jenkins).
• Basic operational knowledge of AWS (fundamentals).
• Basic SQL skills sufficient to run queries and interpret analytics results in our custom tooling.
• Familiarity with open-source reconnaissance tools and the ability to use them passively and responsibly.
• Excellent documentation and communication skills; able to clearly explain fingerprinting logic and validation results.

Tools / technologies (we use)

PyCharm, Jenkins, Jira, Git, AWS, SQL, Python, XML, and a range of open-source reconnaissance utilities (used passively).