20 hours ago
Remote, CanadaSenior
Base Salary
$107k - $190k/yr
Responsibilities
- Drive the Zero-Day Alert process from vulnerability triage to actionable policyholder notification.
- Coordinate urgent outreach with the Security Support Center, Underwriting, and Incident Response for high-severity or actively exploited vulnerabilities.
- Write and refine technology fingerprints, detection rules, scanner signatures, and security findings that turn scan data into reliable risk signals.
- Maintain and expand the distributed honeypot network and analyze telemetry for exploitation and emerging adversary techniques.
- Improve detection accuracy and reduce false positives using claims insights, external datasets, and vulnerability research.
- Publish advisories, research, and briefings that inform security decisions.
- Participate in the on-call rotation for emergency notifications.
Requirements
- At least 5 years of experience in threat intelligence, vulnerability research, penetration testing, or defensive security engineering.
- Deep knowledge of network protocols, operating systems, web applications, and exploitation, including RCE, authentication bypass, and edge-device vulnerabilities.
- Experience assessing new vulnerabilities under time pressure and translating them into practical enterprise risk.
- Hands-on experience writing scanner detections, signatures, or parsing scripts using Python, regular expressions, or protocol fingerprints.
- Experience with honeypots, deception technology, internet-wide scanning, or other large security datasets.
- Strong Python and SQL skills.
- Excellent communication with technical and non-technical audiences.
- A record of clear documentation or public security writing and the judgment to lead complex work independently.
- Bonus qualifications include experience with Censys, Shodan, BinaryEdge, attack surface mapping, reverse engineering, patch diffing, proof-of-concept exploit verification, VPNs, firewalls, load balancers, SCADA/ICS, public security research, CVE credits, conference talks, cyber insurance, underwriting, or risk aggregation modeling.
Benefits
- Remote-first work arrangement.
- Base salary ranges from $106,700/year to $190,000/year depending on Canadian geographic market.
- 100% medical, dental, and vision coverage.
- Flexible PTO.
- Annual home office stipend and WeWork access.
- Mental and physical health wellness programs including Headspace and Lumino.
- Opportunity for advancement.
About Coalition
Coalition builds cyber insurance and active risk management for businesses, combining coverage with cybersecurity tools, automated alerts, and MDR. It distributes policies in the U.S., U.K., Canada, and Australia through partner insurers and its own carrier, Coalition Insurance Company, and provides its Coalition Control cyber risk platform. Founded in 2017 and headquartered in San Francisco, the company is privately held.