pythonsqlcybersecuritypenetration testingnetwork protocolsvulnerability researchthreat intelligenceregexhoneypotszero day vulnerabilities
Вакансия из Hirify Global, списка международных tech-компаний Для мэтча и отклика нужен Plus
Пожаловаться
Зарплата и рынок
Очень мало
107к-133к CAD/год
170к CAD210к CADмедиана270к CAD
По похожим ролям (48) ~ 210к CAD/год
На СНГ рынке: $4.2к/мес ($2.3к - $5.5к)
68
Хорошая вакансия
развернуть
Обязанности четко описаны, а работа связана с серьезными задачами в threat intelligence. Однако зарплата заметно ниже ориентира для похожих senior-позиций, что снижает привлекательность предложения.
Кликните для подробной информации
Ниже рынкаАктуальные технологииПонятные задачиДежурстваКибербезопасностьХорошие льготы
Оценка от Hirify AI
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Подключить Plus
Описание вакансии
Текст:
Hirify AI/Оригинал
TL;DR
Senior Threat Intelligence Engineer (Cybersecurity): Building zero-day alerts, vulnerability detections, honeypots, and intelligence for an active cyber insurance platform with an accent on exploitation analysis, risk signal accuracy, and emergency policyholder notifications. Focus on researching emerging vulnerabilities, analyzing large-scale honeypot telemetry, refining Python and SQL-based detections, and coordinating high-severity response across security and underwriting teams.
Location: Remote within Canada
Base salary: CAD 149,600–190,000 per year in Alberta, British Columbia, and Ontario; CAD 106,700–133,425 per year in other Canadian locations.
Company
hirify.global combines cyber insurance coverage with cybersecurity tools to help businesses prevent and manage digital risk.
What you will do
Drive the Zero-Day Alert process from vulnerability triage through actionable policyholder notifications.
Coordinate urgent outreach with Security Support, Underwriting, and Incident Response for severe or actively exploited vulnerabilities.
Develop technology fingerprints, scanner detections, parsing scripts, and security findings that convert scan data into reliable risk signals.
Maintain and expand a distributed honeypot network while analyzing telemetry for exploitation and emerging adversary techniques.
Improve detection accuracy and reduce false positives using claims insights, external datasets, and vulnerability research.
Publish security advisories, research, and briefings, and participate in the emergency notification on-call rotation.
Requirements
5+ years of experience in threat intelligence, vulnerability research, penetration testing, or defensive security engineering.
Deep knowledge of network protocols, operating systems, web applications, and exploitation techniques such as RCE, authentication bypass, and edge-device vulnerabilities.
Experience assessing new vulnerabilities under time pressure and translating findings into practical enterprise risk.
Hands-on experience writing scanner detections, signatures, or parsing scripts using Python, regular expressions, and protocol fingerprints.
Experience with honeypots, deception technology, internet-wide scanning, or large security datasets.
Strong Python and SQL skills, excellent communication, and the ability to lead complex work independently.
Nice to have
Experience with Censys, Shodan, BinaryEdge, or attack surface mapping.
Reverse engineering, patch diffing, or proof-of-concept exploit verification experience.
Familiarity with VPNs, firewalls, load balancers, or SCADA/ICS.
Public security research, CVE credits, conference talks, or knowledge of cyber insurance and underwriting.
Culture & Benefits
Remote-first work environment for employees based in Canada.
100% medical, dental, and vision coverage.
Flexible paid time off.
Annual home office stipend and WeWork access.
Mental and physical health programs, including Headspace and Lumino.
Hiring process
Interviewed candidates receive an application status update within 45 days of the final interview.
AI-assisted tools support application organization and review, while final decisions are made by the recruiting team.
Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →