Senior Security Researcher

Research third-party identity and SaaS attacks: Research attacker tradecraft and emerging threats targeting identities, applications, authentication flows, sessions, privileges, and data across third-party identity providers and SaaS platforms, including Okta and Salesforce. Translate threat research into protection: Convert security research, incidents, customer reports, and threat-landscape intelligence into clear attack scenarios, telemetry requirements, detection opportunities, investigation logic, and durable protection strategies. Build AI agents for security research: Design and develop RAG-based agents that retrieve and reason over product documentation, schemas, threat intelligence, prior research, code, telemetry, and operational knowledge to support security-research workflows. Develop coding and detection-authoring agents: Build coding agents that help generate, review, refine, and maintain security analytics, KQL queries, detection logic, test cases, and related research artifacts with appropriate human oversight. Create evaluation frameworks: Define representative datasets, scenarios, benchmarks, and scoring methods to evaluate agent accuracy, completeness, groundedness, robustness, and security-research usefulness. Doctorate in Statistics, Mathematics, Computer Science, Computer Security, or related field OR Master's Degree in Statistics, Mathematics, Computer Science, Computer Security, or related field AND 3+ years experience in software development lifecycle, large-scale computing, threat analysis or modeling, cybersecurity, vulnerability research, and/or anomaly detection. OR Bachelor's Degree in Statistics, Mathematics, Computer Science, Computer Security, or related field AND 4+ years experience in software development lifecycle, large-scale computing, threat analysis or modeling, cybersecurity, vulnerability research, and/or anomaly detection. These requirements include, but are not limited to the following specialized security screenings: Doctorate in Statistics, Mathematics, Computer Science, Computer Security, or related field AND 3+ years experience in software development lifecycle, large-scale computing, threat analysis or modeling, cybersecurity, vulnerability research, and/or anomaly detection. OR Master's Degree in Statistics, Mathematics, Computer Science, Computer Security, or related field AND 6+ years experience in software development lifecycle, large-scale computing, threat analysis or modeling, cybersecurity, vulnerability research, and/or anomaly detection. OR Bachelor's Degree in Statistics, Mathematics, Computer Science, Computer Security, or related field AND 8+ years experience in software development lifecycle, large-scale computing, threat analysis or modeling, cybersecurity, vulnerability research, and/or anomaly detection. OR equivalent experience. Background in the modern attacker kill-chain and MITRE ATT&CK. Experience researching hybrid attacks involving third-party identity providers and SaaS applications, such as Okta and Salesforce, and attacks against cloud services. Threat hunting and data-analysis skills. Experience with AI agents, RAG-based systems, agent evaluation, LLM-as-a-judge techniques, and quality validation. Programming skills in Python or a similar language, with experience building production-quality research or automation tools. Experience designing evaluation frameworks and quality-validation methods for AI systems, including measuring accuracy, groundedness, reliability, and regressions.