Security Researcher

We're looking for a Security Researcher with 4+ years of experience who is excited about how data gets exposed, stolen, and misused. You'll work with detection engineers to study real-world data breaches, understand attacker and insider behavior, and turn that research into detections and classifiers that power our product. If you're curious about where sensitive data hides and how it leaks, this role is for you.

Responsibilities:

• Hands-on understanding of web application security, network security, AI security, and cloud misconfigurations, with the ability to apply it to securing our internal systems.
• Research data breach incidents, exfiltration techniques, and insider threat patterns, and translate findings into product requirements and detection logic.
• Help build and test rules for identifying sensitive data such as PII, financial records, health data, credentials, secrets, and intellectual property across structured and unstructured sources.
• Study misconfigurations and access risks in cloud data stores, databases, and SaaS apps.
• Analyze logs and access patterns to spot anomalous data activity like mass downloads, unusual sharing, or privilege misuse.

Requirements:

• Nice to have: map detections to frameworks such as MITRE ATT& CK and to regulatory requirements including GDPR, DPDP Act, HIPAA, and PCI DSS.
• Build test datasets and attack simulations to validate detection accuracy and reduce false positives.
• Script small tools in Python to automate research, data generation, and testing.
• 4+ years of experience in security or a related field.
• A degree in computer science, IT, cybersecurity, or a related field, or equivalent practical experience.
• Good fundamentals in networking, operating systems, and how web and cloud applications store and move data.
• Understanding of core data security concepts: encryption, access control, data classification, and data loss prevention.
• Basic familiarity with at least one cloud platform and its IAM model.
• Strong curiosity, attention to detail, and the ability to explain findings clearly in writing.
• Exposure to DLP, DSPM, DAM, or SIEM tools.
• Experience with regex, pattern matching, or basic ML/NLP for text classification.
• CTF participation, bug bounty findings, or personal projects involving cloud misconfigurations or data exposure.
• Awareness of privacy regulations and how they define sensitive data.
• Certifications such as CompTIA Security+, AWS Cloud Security Specialty, or CCSK.