Senior Security Research Engineer

Salt Security is the original API Security vendor pioneering the market as the first vendor in 2018.  Since then we have exhibited hyper-growth in a number of customers, threats stopped, and revenue.  We saw API security as the security battleground of the future years ago as APIs started to form the foundation of the application innovation needed to drive business success today.  Across banks, retail and transportation, IoT, autonomous vehicles, and smart cities, every modern app depends on APIs. Attackers realize APIs are the conduits to all sorts of valuable data and services – within the year, APIs are predicted to be the number one application threat vector. Without secure APIs, businesses cannot rapidly innovate. Salt Security has delivered the only patented solution to discover all APIs and their exposed data, stop API attackers, and provide remediation details for dev teams to write more secure APIs.

At Salt, we’re passionate about what we do. We work as a team and embrace new ideas, wherever they come from. We also enjoy all the benefits of a startup environment, including quickly seeing the results of your work, making an outsized impact on our company, and solving diverse challenges.

Want to make a big difference? We encourage you to apply!

Salt Security is a leading cybersecurity company dedicated to providing innovative solutions that protect organizations from API-related security threats. Our comprehensive platform helps businesses identify, monitor, and protect their APIs from vulnerabilities, ensuring the security and integrity of their digital assets. With a focus on cutting-edge technology and a commitment to excellence, Salt Security is at the forefront of the cybersecurity industry, helping clients around the world safeguard their data and operations.

Who we are:

At Salt Security, we’re passionate about what we do. We work as a team and embrace new ideas, wherever they come from. We also enjoy all the benefits of a startup environment, including quickly seeing the results of our work, making an outsized impact on our company, and solving a diverse set of engineering challenges.

If you want to make a big difference, then we encourage you to apply!

What we're looking for:

We’re looking for a multi-skilled security researcher to research and develop innovative defense ideas from concept to production.
You’ll work on diverse areas, from enhancing attacker detection models and identifying customer security risks to researching emerging trends like AI agents and MCP, and understanding their profound impact on the security landscape, among many other exciting challenges.

If you’re eager to stay ahead of technology, tackle challenges, create and develop new ideas, and shape the future of our product, this role is for you.

Requirements

Who are you?

You are a multiskilled person who likes to dive deep into different areas, constantly learning new things and expanding your horizons.

The role requires an in-depth understanding of offensive security in web applications, research creativity, a never-give-up attitude, development skills (e.g., Python/Go), and the ability to think independently while delivering impactful solutions from end-to-end. 

More specifically, if you have 5+ years of experience in one or more of these fields, you can be a great fit for our team:

• Web vulnerability research 

• Mobile vulnerability research (Android and/or iOS)

• CVEs / Public talks / Write-Ups / for security issues found

• Development experience and/or relevant academic background

• Entrepreneurship