15 hours ago
Remote, PortugalSenior
Responsibilities
- Drive the Zero-Day Alert process from vulnerability triage through actionable policyholder notification.
- Coordinate urgent outreach with the Security Support Center, Underwriting, and Incident Response for high-severity or actively exploited vulnerabilities.
- Write and refine technology fingerprints, detection rules, scanner detections, and security findings.
- Maintain and expand a distributed honeypot network and analyze telemetry for exploitation and adversary techniques.
- Improve detection accuracy and reduce false positives using claims insights, external datasets, and vulnerability research.
- Publish security advisories, research, and briefings.
- Participate in the on-call rotation for emergency notifications.
Requirements
- 5+ years of experience in threat intelligence, vulnerability research, penetration testing, or defensive security engineering.
- Deep knowledge of network protocols, operating systems, web applications, and exploitation, including RCE, authentication bypass, and edge-device vulnerabilities.
- Experience assessing vulnerabilities under time pressure and translating them into practical enterprise risk.
- Hands-on experience writing scanner detections, signatures, or parsing scripts using Python, regex, and protocol fingerprints.
- Experience with honeypots, deception technology, internet-wide scanning, or large security datasets.
- Strong Python and SQL skills.
- Excellent communication with technical and non-technical audiences.
- Clear documentation or public security writing experience and the judgment to lead complex work independently.
- Bonus experience with Censys, Shodan, BinaryEdge, attack surface mapping, reverse engineering, patch diffing, PoC exploit verification, VPNs, firewalls, load balancers, SCADA/ICS, public security research, CVE credits, conference talks, cyber insurance, underwriting, or risk aggregation modeling.
Benefits
- 100% medical, dental, and vision coverage.
- Flexible PTO policy.
- Annual home office stipend and WeWork access.
- Mental and physical health wellness programs including One Medical, Headspace, and Wellhub.
- Remote-first work environment and opportunities for advancement.
About Coalition
Coalition builds cyber insurance and active risk management for businesses, combining coverage with cybersecurity tools, automated alerts, and MDR. It distributes policies in the U.S., U.K., Canada, and Australia through partner insurers and its own carrier, Coalition Insurance Company, and provides its Coalition Control cyber risk platform. Founded in 2017 and headquartered in San Francisco, the company is privately held.