Loginsoft - Security Researcher

Job Description :

- Develop and maintain fingerprints and security plugins derived from publicly available information

- Fetch and aggregate service banners across multiple networking/communication protocols and ports (e.g., HTTP/S, SSH, FTP, SNMP, MQTT, Telnet, SMB) using safe, read-only methods.

- Design robust regular expressions and XML-based rules for fingerprinting and detection.

- Implement concise, well-documented Python plugins to parse banner data and normalize identifying attributes.

- Writing unit and integration tests for fingerprints/plugins into CI/CD pipelines and run automated tests (Jenkins).

- Maintain version control and code review discipline (Git).

- Collaborate with product/security teams via Jira and Git to triage findings, track issues, and roll out updates.

- Use AWS at a basic operational level to deploy and run passive data collection and processing infrastructure.

- Perform data analysis using our custom analytics tool; basic SQL knowledge required to query and validate results.

- Evaluate and responsibly leverage open-source reconnaissance tools for passive discovery and validation; extend tooling where necessary while adhering to non-intrusive usage policies.

- Produce clear technical documentation, including methodology, assumptions, validation steps, and change logs.

Required skills & experience :

- Demonstrated understanding of networking and communication protocols and their common ports.

- Proficient in Python for writing small plugins, parsers, and automation scripts.

- Basic skills in regular expressions and working knowledge of XML for rule definition.

- Practical experience with Git, Jira, and CI/CD tools (Jenkins).

- Basic operational knowledge of AWS (fundamentals).

- Basic SQL skills sufficient to run queries and interpret analytics results in our custom tooling.

- Familiarity with open-source reconnaissance tools and the ability to use them passively and responsibly.

- Excellent documentation and communication skills; able to clearly explain fingerprinting logic and validation results.

Tools / technologies (we use) :

PyCharm, Jenkins, Jira, Git, AWS, SQL, Python, XML, and a range of open-source reconnaissance utilities (used passively).