Security Researcher

Required Education and Experience 

Applicants must meet one of the following education and experience requirements:

* Typically requires a Bachelor’s degree and a minimum of 2 years of relevant experience; 

* or an advanced degree without experience;

* or equivalent work experience

Required Skills

We believe a wide variety of backgrounds can fill this role. If you believe that you're a good fit, but your background isn't a perfect match, please talk to us anyway.

*Must have experience reading and understanding governmental compliance requirements, identifying non-compliant solutions, and guiding remediation

*Must have knowledge/experience encompassing one of the following, and aptitude in the other: (1) Design or analyze applications and/or systems, (2) Identify and explain application and system security risks; propose solutions

*Experience collaborating with and persuading internal and external stakeholders, including but not limited to: regulators, auditors, and teams across the organization.

*Able to clearly, persuasively and effectively communicate technical ideas to technical and non-technical audiences; through both speech and prose.

*Experience in at least two programming languages, including a scripting language. 

*Experience with and interest in Internet technologies and fundamental protocols such as HTTP, TCP/IP, TLS, and DNS.

*Experience or familiarity with security technologies, processes, and concepts such as symmetric and asymmetric cryptography, TLS, and Authentication and Authorization.

*A strong work ethic and a positive attitude

*Excellent technical aptitude and a desire to learn constantly

Desired Skills

*Experience with industry compliance and security standards including one or more of the following: NIST/DoD frameworks, FedRAMP, FedRAMP+

*Experience communicating technical, non-technical (e.g. legal, compliance, regulatory) and security requirements to engineering teams, standards bodies, and/or non-technical authorities

*Experience with complex distributed systems, especially Akamai products

*Experience improving an engineering organization’s security/compliance practices 

*Familiarity with the software development process

*Exposure to a wide range of language types (e.g., scripting, Unix-like, procedural, functional, high-level) is especially helpful.

*Experience authoring applications using several different web-based application frameworks.

Other Information

Some examples of non-traditional backgrounds that we believe would be successful in this role:

*Security Engineer or Systems Analyst

*Expert Manual Penetration Tester

*Emergency Management, Crisis Planning