Senior Security Researcher – Web Threats

Description About GeoEdge GeoEdge is the global leader in ad security, trusted by hundreds of the world's top ad platforms, publishers, and app developers. Our mission: make the internet safer by stopping malicious, deceptive, and low-quality ads before they ever reach a user. The Role Malvertising attackers hide their campaigns behind cloaking, obfuscation and, more and more, AI. As a Senior Security Researcher in our Security Research Lab, you'll hunt those campaigns down, figure out how they work, and turn what you find into detection that runs in real time across billions of ad impressions. You'll work with a small, hands-on research team and partner closely with R&D and Data Science, and your findings will reach customers and the wider security community. What You'll Do • Hunt for and investigate new malvertising campaigns, scams and evasion techniques across the ad supply chain • Reverse-engineer malicious ad creatives, JavaScript and landing pages to understand how they target users and avoid detection • Turn research findings into detection logic, signatures and data signals, working with R&D and Data Science to ship them to production • Build tools and automation, including LLM- and agent-based workflows, that speed up research and threat hunting • Track attacker infrastructure and campaigns over time, and measure the precision and coverage of our detections • Write threat reports and blog posts, and help present GeoEdge research externally • Support Customer Success on escalations with technical analysis of specific incidents Requirements What You Bring • Hands-on experience in threat research, malware analysis or detection engineering, with examples of attacks you investigated end to end • Strong web security knowledge: JavaScript, browsers, DOM, HTTP/HTTPS and redirect chains • Ability to read and deobfuscate malicious JavaScript and analyze it with browser dev tools, proxies and sandboxes • Scripting skills in Python (or similar) to automate analysis and work with large datasets • Understanding of how attackers evade detection, including cloaking, fingerprinting and obfuscation • Clear written English, enough to write a threat report for customers and a technical write-up for engineers Bonus Points • Experience using LLMs or AI agents to solve real security problems • Experience in AdTech, digital advertising or malvertising research • Public research: publications, CVEs, blog posts or conference talks • Background in a cybersecurity product company or a technological intelligence unit