Offensive Security Researcher

Bitdefender Bitdefender is a cybersecurity leader delivering best-in-class threat prevention, detection, and response solutions worldwide. Guardian over millions of consumer, enterprise, and government environments, Bitdefender is one of the industry’s most trusted experts for eliminating threats, protecting privacy, digital identity and data, and enabling cyber resilience. With deep investments in research and development, Bitdefender Labs discovers hundreds of new threats each minute and validates billions of threat queries daily. The company has pioneered breakthrough innovations in antimalware, IoT security, behavioral analytics, and artificial intelligence and its technology is licensed by more than 180 of the world’s most recognized technology brands. Founded in 2001, Bitdefender has customers in 170+ countries with offices around the world. For more information, visit https://www.bitdefender.com. Role Overview This position is designed for an offensive security practitioner who wants to transition toward a career of technical advocacy and research. You are likely a red teamer, penetration tester, or exploit researcher who enjoys not only research on offensive cyber capabilities but also finds great satisfaction in communicating the ins and outs of attacks and security flaws to general security audiences along with the treatment approaches to stop these attacks. You will join a dedicated team that sits between our Bitdefender Labs, our global telemetry, and the public security community. Your job is translating research and raw data into actionable knowledge for security professionals worldwide. In many companies, public research is treated as a "side project" or a distraction from billable hours. At Bitdefender, sharing your findings with the public is the core mission. You will be paid to investigate, to simulate, and to educate. Core Responsibilities *Attack Simulation & Practical Demos: You will design and execute real-life attack scenarios, including advanced evasion techniques. A critical part of this role is the practical demonstration. You will record high-quality technical demos that show the attack in motion and how the GravityZone security platform detects, blocks, or provides visibility into the threat. *Technical Storytelling: You will deconstruct complex attacks to help other professionals understand how attackers operate. *Community Advocacy: Represent the company at major conferences and within technical user groups. Whether it is speaking at a global event or supporting an open-source project, you will be a visible, active member of the cybersecurity community. *Security Best Practices: You will advocate for rigorous security standards. Your research will help define what "good" looks like for the industry, using real-world data to back up your recommendations. Technical Requirements & Experience *Offensive Foundations: Significant experience in offensive security roles. You must have a deep understanding of Windows internals, lateral movement, and evasion techniques. *Technical Communication: A proven track record of sharing knowledge. This could be through a technical blog, a portfolio of conference presentations, or significant contributions to GitHub projects. *Interest in Storytelling: You have a natural ability to structure a technical finding into a clear, engaging narrative. You enjoy the challenge of making complex concepts accessible without losing technical depth. *Platform Curiosity: A desire to work with large-scale security platforms. You should be interested in how EDR/XDR systems function at scale and how they can be optimized against sophisticated actors. What We Offer *You will have direct access to one of the world's largest cybersecurity telemetry datasets and an internal network of researchers. *Research and public engagement are not side tasks at Bitdefender. We are an organization that values innovation, making both research and public engagement a crucial part of your primary objective: to advocate and educate. *We value our technical experts. You will have a platform to build your personal brand both inside the company and across the global security industry. *We support a remote-first culture, granting you the flexibility to work from wherever you are most productive