🛠 Tech Stack

💼 About This Role

You'll hunt malicious packages in real-time across PyPI, npm, and Maven, building detection rules that protect customers before threats reach production. Your research enriches vulnerability data and powers Safety's Firewall to auto-block attacks. You'll see your findings ship within days, directly impacting thousands of developers.

🎯 What You'll Do

• Analyze suspicious packages across PyPI, npm, and Maven in real-time
• Review and validate vulnerabilities with reachability analysis
• Refine detection logic to reduce false positives
• Develop LLM-assisted analysis tools with data engineers

📋 Requirements

• Multiyear experience in cybersecurity research with hands-on malware analysis
• Deep understanding of PyPI, npm, Maven ecosystems and attack vectors
• Experience using LLMs (GPT, Claude, Copilot) for security research
• Track record of building or improving automated detection systems

✨ Nice to Have

• Published security research or CVE discoveries
• Background in static or dynamic analysis
• Contributions to open-source security projects

🎁 Benefits & Perks

• 💵 Competitive salary: 120,000-150,000 CAD
• 🏖️ 20 days paid vacation per year
• 🏥 Private Healthcare Plan
• 📈 Generous equity stock options
• 🏡 Remote work with flexible hours