Senior Security Researcher
Human Capital is a multi-stage venture capital firm that partners with exceptional founders, deploying capital and building high-caliber teams at scale across the world's most critical industries.
About Human Capital
Human Capital is a multi-stage venture capital firm that builds and invests in companies defining the world's most critical industries. The firm partners with founders to assemble exceptional teams, offering talent, investment, legal, compliance, and operational support alongside capital. Its portfolio and clients include notable companies such as Livongo, Snowflake, SpaceX, Anduril, Dandy, The Boring Company, Brex, Neuralink, Cloaked, XAI, Commure, ModRetro, Kalshi, Applied Intuition, Speechify, Transcarent, and Qualia.
Skills
About the Role
You will lead the development of product features and detection capabilities to identify Invalid Traffic (IVT) in mobile and desktop environments. You will dig into emerging threat models within the Ad Tech ecosystem and investigate new environments and advertising types that could be exploited by bad actors. You'll answer tough technical questions about redirect obfuscation, data center spoofing, page tampering, and automation evidence. You'll stay on top of industry standards, cybersecurity trends, and adversary tools and techniques. You'll red team and experiment to develop new detection tactics before adversaries can exploit gaps, and you'll regularly up-level the broader team's knowledge by sharing signals and techniques you discover.
Requirements
- Knowledgeable on the mechanics of fraud and abuse within Ad Tech and the programmatic ecosystem OR knowledgeable on the cybersecurity threat landscape
- Extensive knowledge of how the internet operates, including DNS, TCP/HTTP/TLS network protocols, and javascript signal collection capabilities
- Proven experience in scripting languages (Python and JavaScript); bonus points for SQL
- Knowledge of how to use AI tools effectively or to improve, automate, and agent-ize existing processes
- Comfortable juggling different projects as priorities change
Responsibilities
- Lead the development of product features and detection capabilities such as payload signal collection and ad fraud detection techniques
- Identify different forms of Invalid Traffic (IVT) in mobile and desktop environments
- Facilitate research into new and emerging threat models within the Ad Tech ecosystem
- Find new ways to detect automation tools like Selenium, Playwright, or Puppeteer
- Investigate redirect obfuscation, data center spoofing, page tampering, and javascript evidence of automation
- Keep up on industry standards, techniques, cybersecurity trends, and adversary tools
- Red team and experiment to develop new tactics for fraud and detection bypass
- Up-level the broader team's knowledge of signals and techniques through signal sharing sessions
Benefits
- Stock options
- Medical benefits
- Financial benefits
- Well-being and learning stipends
- Flexible work options
- Dedicated time off