Offensive Security Researcher
InformaticaResponsibilities
- Conduct offensive security assessments through manual testing, code review, architectural analysis, and threat modeling.
- Identify critical, high-impact, systemic, and isolated vulnerabilities across application ecosystems.
- Research emerging attack vectors, abuse cases, and bypass techniques relevant to applications and platforms.
- Partner with software engineers, technical leads, and architects to explain risk and implement scalable remediations.
- Execute Secure by Default initiatives by applying security guardrails, baseline controls, and safer configurations.
- Review application and platform designs early in development to prevent vulnerabilities before release.
- Apply security standards and architectural guidance during application development.
- Share offensive security knowledge and techniques with engineering teams.
- Collaborate with detection, monitoring, and incident response teams to improve visibility into real-world exploitation.
Requirements
- At least 3 years of experience in Application Security or Offensive Security with an attacker mindset.
- Demonstrated experience finding and remediating vulnerabilities in complex applications.
- Strong understanding of web application security, including OWASP Top 10, authentication and authorization flaws, API security, injection attacks, logic flaws, access-control bypasses, secure design, and threat modeling.
- Hands-on experience with manual security testing beyond automated tools.
- Ability to translate complex security findings into clear, actionable guidance for engineers.
- Strong communication and collaboration skills with engineering teams.
- Preferred: published security research or CVEs through technical blogs, advisories, whitepapers, or conference presentations.
- Preferred: experience implementing platform-level or framework-level security improvements.
- Preferred: background in vulnerability discovery, security research, or red teaming.
- Preferred: experience with Secure by Default or security-by-design concepts.
- Preferred: familiarity with cloud-native architectures, microservices, and distributed systems.
- Preferred: ability to balance security requirements with product velocity and developer experience.
Benefits
- Wellbeing reimbursement.
- Generous parental leave.
- Adoption assistance.
- Fertility benefits.
Categories
About Informatica
Informatica (NYSE: INFA), a leader in AI-powered enterprise cloud data management, helps businesses unlock the full value of their data and AI. As data grows in complexity and volume, Informatica’s Intelligent Data Management Cloud™ delivers a complete, end-to-end platform with a suite of industry-leading, integrated solutions to connect, manage and unify data across any cloud, hybrid or multi-cloud environment. Powered by CLAIRE® AI, Informatica’s platform integrates natively with all major cloud providers, data warehouses and analytics tools— giving organizations the freedom of choice, avoiding vendor lock-in and delivering better ROI by enabling access to governed data, simplifying operations and scaling with confidence. Trusted by approximately 5,000 customers in nearly 100 countries—including over 80 of the Fortune 100—Informatica is the backbone of platform-agnostic, cloud data-driven transformation. Informatica. Where data and AI come to life.™ Contact: PR@informatica.com