Associate Security Researcher

hace 1 semana


Desde casa, Colombia Sonatype A tiempo completo

Sonatype is the software supply chain management company. We're on a mission to change how the world innovates by making software development easier. From running the world's largest repository of Java open-source components (Maven Central) to inventing componentized software development and then software supply chain management to creating the only solution that stops malicious open-source malware in its tracks, we're constantly leading the industry while helping thousands of customers manage open source every day.

Already used by 15 million developers, we have lofty goals for our technology to be in the hands of every engineering team. And we need you to do that. Join us

Sonatype’s mission is to enable organizations to better manage their software supply chain. We offer a series of products and services including the Sonatype Nexus Repository and Sonatype Lifecycle.

The Security Researcher will investigate and analyze vulnerabilities in open-source software.

Sonatype is looking for a passionate, driven and talented Security Researcher to provide high quality security data from researching software vulnerabilities. This high-quality security data ensures that our customers are getting maximum value out of our products making them feel like they are part of the Sonatype family. If you are a positive-thinker and problem-solver and believe that customer success and company success go hand-in-hand, this is a great job for you. This position will provide a valuable learning opportunity with great potential to grow your newly started career in cyber-security. Enjoy your job as you work in a fast-paced, flexible, and fun environment, with talented, diverse, and forward-thinking individuals.

**Responsibilities**:

- Review, isolate, analyze, and reverse engineer vulnerabilities in open-source software.
- Document attack capabilities.
- Provide detection and remediation guidance.
- Aid in ideas and prototypes for new tooling.
- Collaborate with other team members toward shared product goals.
- Improve Sonatype products by providing valuable security data.
- Work with technology and business team members to define and refine requirements in an agile development environment

**Required Qualifications**:

- Bachelor of Science Degree in Computer Science, Cybersecurity, Engineering, or related field; or at least 4 years of related work experience in lieu of a degree
- Basic knowledge of Java, C#, or JavaScript.

**Desired Qualifications**:

- Excellent oral and written communication skills.
- Excellent organizational skills and detail oriented.
- Ability to work independently and as part of a team

We support our remote employee experience. While we have offices in Fulton MD, Tyson's Corner VA, London UK, and Sydney AUS, we are remote first and always have been. We use a number of communication tools to connect across the company, keep information flowing day to day, and meet face-to-face on a targeted basis at organization and team meetups.

Thousands of organizations and millions of developers use our software. If you have a passion for improving how the world develops software, Sonatype is the right place for you.

At Sonatype, we value diversity and inclusivity. We offer perks such as parental leave, diversity and inclusion working groups, and flexible working practices to allow our employees to show up as their whole selves. We are an equal-opportunity employer, and we do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status. If you have a disability or special need that requires accommodation, please do not hesitate to let us know.

LI-Remote


  • Security Researcher

    hace 3 semanas


    Desde casa, Colombia Sonatype A tiempo completo

    Sonatype is the software supply chain management company. We're on a mission to change how the world innovates by making software development easier. From running the world's largest repository of Java open-source components (Maven Central) to inventing componentized software development and then software supply chain management to creating the only solution...


  • Desde casa, Colombia Sonatype A tiempo completo

    Sonatype is the software supply chain management company. We're on a mission to change how the world innovates by making software development easier. From running the world's largest repository of Java open source components (Maven Central) to inventing componentized software development, and then software supply chain management, to creating the only...


  • Desde casa, Colombia Formula.Monks A tiempo completo

    **Position Overview**: **Responsibilities**: Develop and maintain security control policies and procedures for cloud environments, ensuring alignment with industry standards, regulatory requirements, and organizational objectives. Collaborate with stakeholders to understand business requirements and translate them into actionable security controls and...


  • Desde casa, Colombia Formula A tiempo completo

    Position Overview:Responsibilities:Develop and maintain security control policies and procedures for cloud environments, ensuring alignment with industry standards, regulatory requirements, and organizational objectives.Collaborate with stakeholders to understand business requirements and translate them into actionable security controls and policies.Conduct...


  • Desde casa, Colombia GoDaddy A tiempo completo

    **Location Details**: Remote - Colombia** **Remote**: This is a remote position, so you’ll be working remotely from your home. You may occasionally visit a GoDaddy office to meet with your team for events or offsites. **Join our Team** Our Pagely security team is seeking a Senior Security Engineer (SSE) to join our platform security team to protect our...

  • Senior Security Engineer

    hace 2 semanas


    Desde casa, Colombia GoDaddy A tiempo completo

    Location Details: Remote - Colombia**Remote: This is a remote position, so you'll be working remotely from your home. You may occasionally visit a GoDaddy office to meet with your team for events or offsites.Join our TeamOur Pagely security team is seeking a Senior Security Engineer (SSE) to join our platform security team to protect our platforms against...

  • Security Engineer

    hace 2 semanas


    Desde casa, Colombia Caseware A tiempo completo

    Caseware is one of Canada's original Fintech companies, having led the global audit and accounting software industry for over 30 years, with more than 500,000 users across 130 countries and available in 16 different languages. While you might not have heard of us (yet) over 36,000 accounting and audit professionals list Caseware as a skill on their LinkedIn...

  • Security Engineer

    hace 6 días


    Desde casa, Colombia Caseware A tiempo completo

    Caseware is one of Canada's original Fintech companies, having led the global audit and accounting software industry for over 30 years, with more than 500,000 users across 130 countries and available in 16 different languages. While you might not have heard of us (yet) over 36,000 accounting and audit professionals list Caseware as a skill on their LinkedIn...


  • Desde casa, Colombia Red Hat Software A tiempo completo

    About the job: The Red Hat Global Support Services team is adding an Associate Technical Support Engineer with a background in Linux system administration to join us remotely in Colombia. In this role, you will deliver an outstanding customer support experience by providing technical support and sustaining engineering services to enterprise subscription...

  • QA Associate

    hace 2 semanas


    Desde casa, Colombia Fusemachines A tiempo completo

    **About Fusemachines** Fusemachines is a leading AI strategy, talent, and education services provider. Founded by Sameer Maskey Ph.D., Adjunct Associate Professor at Columbia University, Fusemachines has a core mission of democratizing AI. With a presence in 4 countries (Nepal, United States, Canada, and Dominican Republic and more than 350 full-time...


  • Desde casa, Colombia Red Hat Software A tiempo completo

    About the job:The Red Hat Global Support Services team is adding an Associate Technical Support Engineer with a background in Linux system administration to join us remotely in Colombia.In this role, you will deliver an outstanding customer support experience by providing technical support and sustaining engineering services to enterprise subscription...

  • Especialista Cloud

    hace 2 semanas


    Desde casa, Colombia TIVIT A tiempo completo

    En estos momentos nos encontramos en búsqueda de un talento para cumplir el rol de **Especialista Cloud.** **Requisitos**: - Profesional en Ingeniería de Sistemas, electrónica, Telecomunicaciones o afines. - Certificaciones en: - Microsoft Certified Professional - MCP - Azure Security Engineer Associate - Azure DevOps Engineer Expert - Azure Solutions...


  • Desde casa, Colombia Rawson BPO A tiempo completo

    Lugar de trabajo: REMOTO COLOMBIA En **Rawson Colombia** seleccionamos: **ADMINISTRADOR DE PLATAFORMAS** Para una importante empresa del Sector IT **España** **Requisitos**: Académico: Ingeniería electrónica, sistemas, telecomunicaciones, redes o afines. Certificaciones: Requerida: - Certificación vigente mínimo NSE4 del fabricante de los productos...

  • Bookkeeping Assistant

    hace 3 semanas


    Desde casa, Colombia Rob Levine & Associates A tiempo completo

    Rob Levine & Associates is the largest personal injury firm in Rhode Island. Our firm will be expanding to the Boston Market in 2023 and our team is looking for ambitious, energetic, motivated, and zealous professional bookkeeping assistant to join our growing team. **Compensation**: 3,000,000 COP **Responsibilities**: - Help Bookkeeper resolve stale...


  • Desde casa, Colombia Provectus A tiempo completo

    **Provectus** is a leading technology company dedicated to empowering businesses through cutting-edge solutions and digital innovation. With a strong focus on leveraging emerging technologies and data-driven strategies, we help our clients achieve their goals and stay ahead in today's dynamic market. **Responsibilities**: - Design, implement, and manage...


  • Desde casa, Colombia Fusemachines A tiempo completo

    **About Fusemachines** Fusemachines is a leading AI strategy, talent, and education services provider. Founded by Sameer Maskey Ph.D., Adjunct Associate Professor at Columbia University, Fusemachines has a core mission of democratizing AI. With a presence in 4 countries (Nepal, United States, Canada, and Dominican Republic and more than 350 full-time...

  • Especialista Cloud

    hace 2 semanas


    Desde casa, Colombia TIVIT A tiempo completo

    En estos momentos nos encontramos en búsqueda de un talento para cumplir el rol de Especialista Cloud.Requisitos: Profesional en Ingeniería de Sistemas, electrónica, Telecomunicaciones o afines. Certificaciones en: Microsoft Certified Professional MCP Azure Security Engineer Associate Azure DevOps Engineer Expert Azure Solutions Architect Expert Azure...


  • Desde casa, Colombia Rawson BPO A tiempo completo

    Lugar de trabajo:REMOTO COLOMBIAEnRawson Colombia seleccionamos:ADMINISTRADOR DE PLATAFORMASPara una importante empresa del Sector ITEspañaRequisitos:Académico: Ingeniería electrónica, sistemas, telecomunicaciones, redes o afines.Certificaciones: Requerida: - Certificación vigente mínimo NSE4 del fabricante de los productos Firewall Fortinet ITIL...

  • Associate Engineer

    hace 2 semanas


    Desde casa, Colombia Sonatype A tiempo completo

    Sonatype is the software supply chain management company. We're on a mission to change how the world innovates by making software development easier. From running the world's largest repository of Java open-source components (Maven Central) to inventing componentized software development and then software supply chain management to creating the only solution...


  • Desde casa, Colombia Sonatype A tiempo completo

    Sonatype is the software supply chain management company. We're on a mission to change how the world innovates by making software development easier. From running the world's largest repository of Java open-source components (Maven Central) to inventing componentized software development and then software supply chain management to creating the only solution...