Security Research Engineer

About the Role

We’re seeking a Security Research Engineer to help build the next generation of identity-focused security detections. You will research emerging attack techniques, analyze identity-driven threats across cloud and SaaS environments, and turn insights into high-fidelity detections and product improvements. As a subject matter expert, you’ll guide the evolution of our detection pipeline and core detection logic, driving meaningful impact on customer security and product direction.

What You’ll Do

Threat & Detection Research

• Research emerging attack techniques across IdPs, SaaS, and cloud environments.
• Analyze adversary behaviors such as credential abuse, session hijacking, privilege escalation, and persistence.
• Share your insights with the community through blogs, whitepapers, talks, and contributions that elevate industry understanding.

Data Analysis & Signal Development

• Analyze large volumes of identity and SaaS telemetry to identify indicators and behavioral patterns.
• Form hypotheses and run experiments to improve detection accuracy.

Detection Engineering

• Translate research into rules, heuristics, anomalies, and behavioral models.
• Partner with engineering to improve detection pipeline capability and performance
• Test detections against simulated attacks and real data.

Cross-Functional Collaboration

• Work with product on detection priorities.
• Partner with engineering on pipelines and telemetry quality.
• Share findings with customer-facing teams and support investigations when needed.
  
  

What We’re Looking For

• 2–3 years in security research, detection engineering, threat intel, or similar.
• Experience building detections and analyzing large datasets.
• Strong understanding of identity systems (Okta, Azure AD/Entra, Google Workspace, etc.) and authentication flows.
• Familiarity with cloud/SaaS attack surfaces and attacker TTPs (MITRE ATT&CK, OAuth abuse, identity threats).
• Ability to analyze logs and signals from IdPs, cloud, or SaaS apps.
• Experience creating or validating rule-, anomaly-, or behavior-based detections.
• Experience with scalable data pipelines (Spark or similar).
• Familiar with Python and SQL
• Bonus: threat simulation, red/blue teaming

Why Join Us

• Shape core detection capabilities at an early, high-growth company.
• Work with experienced security engineers who value creativity and practicality.
• Directly influence product direction and customer outcomes.
• A culture of learning, autonomy, and speed.