Cybersecurity Researcher

About the Role

A newly funded cybersecurity startup in Berlin is looking for a Cybersecurity Researcher to join the team and help design the core security, identity, and enforcement foundations of a next-generation AI-powered security risk management platform.

We are an early-stage startup founded by experienced cybersecurity leaders with backgrounds in Israeli Intelligence units. We are looking for a hands-on Cybersecurity Researcher who is passionate about cybersecurity and AI technology, thrives in fast-paced startup environments, and enjoys building complex platforms from the ground up. This is an opportunity to make a real impact.

We’re building a next-generation cyber enforcement platform that helps enterprises understand, measure, and reduce identity risk at scale. Our goal is to turn complex identity and security data into clear, actionable risk insights that CISOs and CTOs can trust.

You will work on core platform components from scratch from day one, shaping how modern enterprises manage and reason about risk using cloud-native systems, AI-driven analysis, and automated enforcement through AI agents.

Key Responsibilities

• Research Identity Across Platforms: Investigate how identity works across platforms, including discovery, permission schemes, hidden attack paths, and behaviors vendors don’t document.
• Connect the Dots Across Environments: Identify attack paths that span SaaS, cloud, and on-premises environments.
• Turn Research into Detection Logic: Translate research findings into detection logic and rule content that ships in the product.
• Shape Product Direction: Work directly with the founders, Product, and Engineering teams to influence what we build next.
• Build Research Tooling: Develop the tools you need to conduct research and share your findings through open-source tools and technical write-ups.

Job Requirements

Must-Have Qualifications

• 4+ years of experience in security research, detection engineering, or a closely related role.
• Hands-on experience with SaaS and cloud platforms such as Microsoft 365 / Entra ID, Google Workspace, Okta, Salesforce, AWS, Azure, or GCP, including their identity and permission models.
• Experience reverse engineering APIs, including intercepting traffic, discovering undocumented endpoints, and testing behavior against vendor documentation.
• Strong Python skills, with an emphasis on writing code that others can read, run, and maintain.
• A solid understanding of identity and access concepts, including OAuth, SAML, SSO, service accounts, API tokens, and delegated permissions.
• Ability to translate research findings into concrete detection logic.
• Based in Berlin or willing to relocate.
• Comfort operating in an ambiguous, early-stage startup environment.
• Knowledge of the identity landscape for AI agents and related attack vectors.

Nice-to-Have Qualifications

• Offensive security experience, including red teaming, penetration testing, or offensive research.
• Experience with Active Directory and hybrid identity environments.
• Published research, conference talks, CVEs, or open-source tools.
• Experience with detection-as-code approaches, such as Sigma or KQL.
• Experience with graph-based attack path analysis, for example using Neo4j.
• A CVE of your own—or a compelling story about why you didn’t get one.

Benefits

• Team Member Equity: ESOPs in a cybersecurity company.
• Competitive Compensation: A salary aligned with the market, with flexible early-stage arrangements possible.
• Fresh Funding Secured: Immediate runway to build, hire, and execute quickly.
• Security Contribution: Contribute to security architecture across identity, AI agents, and enforcement.
• High Autonomy: Freedom to design and build without corporate overhead.
• Work with a Technical CEO: Fast iteration, strong alignment, and clear direction.
• Cutting-Edge Domain: Work at the intersection of identity security, SaaS-to-SaaS access, and AI agent governance.
• Massive Learning Curve: Quickly deepen your expertise in cybersecurity, identity, and AI systems.
• Fast Career Path: Opportunity to evolve into a leadership role as we scale the team.
• Berlin Location: Join a top-tier tech environment with strong cybersecurity and AI ecosystems.
• Direct Impact: Your architecture and code will become the foundation of the entire platform.
• Best Equipment and Tools: High-quality equipment and modern tools to help you do your best work from day one.
• Team Offsites: Regular team offsites designed to build strong connections, alignment, and shared momentum.