{"id":2035000,"url":"https://alion.io/job/cybercube-analytics-llc-security-research-engineer-attack-surface-risk-signals","title":"Security Research Engineer, Attack Surface & Risk Signals","company":{"id":2073737,"name":"CyberCube Analytics, LLC","domain":"cybcube.com","url":"https://alion.io/company/cybcube","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Ashby","truth_index":null},"role":"AI/ML","role_family":"AI/ML","seniority":"middle","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["San Francisco, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":140000,"max":160000,"currency":"USD","period":"year","gross":null,"usd_annual":160000},"salary_estimate":null,"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"BGP","optional":false},{"name":"DNS","optional":false},{"name":"TCP/IP","optional":false},{"name":"Hadoop","optional":true},{"name":"Python","optional":true},{"name":"Red Teaming","optional":true},{"name":"Spark","optional":true},{"name":"SQL","optional":true}],"status":"live","first_seen_at":"2026-10-07T14:22:59Z","employer_posted_date":"2026-10-07","last_verified_at":"2026-10-13T02:28:48Z","board_verified":true,"closed_at":null,"days_open":5,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":5},"description":"About CyberCube:\nCyberCube delivers the world's leading analytics to quantify digital risk, helping the largest global carriers, reinsurers and brokers understand, price and manage cyber risk in financial terms.\nAI at our foundation, cyber risk at our core. We don't just use AI, we shape it.\n\nBuilt on AI from day one. Artificial intelligence has been part of our strategy since the beginning, blended with deep cybersecurity and insurance expertise and backed by rigorous testing.\n\nTrusted by more than 100 clients, including 75% of the top 40 European and US cyber insurance carriers and 70% of the top ten reinsurance brokers.\n\nBacked for global growth. In 2025 Spectrum Equity joined some of CyberCube’s financial partners as a new cornerstone investor, accelerating our global growth and fueling innovation across our end-to-end cyber risk analytics for the insurance industry.\n\nA truly global team across San Francisco, New York, London, and Tallinn.\n\nA culture of collaboration, openness, intellectual rigor, and ownership for excellence.\n\nPeople at the forefront. We encourage CyberCubers to challenge themselves, push boundaries, and do the best work of their careers.\n\nQuantitative Cyber Risk Engineer\nAbout the Role Are you fascinated by the underlying architecture of the internet? Do you look at complex network configurations and immediately see the quantitative risk exposure?\nAs a Quantitative Cyber Risk Engineer, you will play a critical role at the intersection of network engineering, cybersecurity, and data science. We are looking for an expert who deeply understands how the internet is wired-down to the protocol level-and possesses the quantitative prowess to translate that knowledge into computable risk metrics.\nIn this role, you will analyze how global businesses configure their internet-facing assets and design mathematical signals that accurately quantify their exposure to cyber attacks. Working alongside Data Scientists, Engineers, and Product teams, your research and models will directly drive the next generation of risk-scoring and analytical engines for the cyber insurance industry.\nIf you are passionate about turning theoretical network vulnerabilities into actionable, real-world risk signals that influence a global industry, this is the role for you.\nKey Responsibilities\nDesign Risk Signals: Develop innovative, quantitative signals that accurately measure a company’s exposure to cyber attacks based on their network architecture, asset configurations, and internet footprint.\n\nQuantify the Unquantifiable: Translate theoretical cybersecurity concepts and complex network topologies into empirical, actionable risk metrics and assumptions.\n\nArchitectural Deep-Dives: Evaluate and extract meaningful insights from how organizations deploy and configure internet-facing protocols, cloud infrastructure, and enterprise networks.\n\nThreat Landscape Research: Conduct in-depth research on emerging cyber threats (e.g., critical vulnerabilities, ransomware, trending exploits, data breach techniques) and map them to underlying asset configurations.\n\nCross-Functional Collaboration: Serve as the subject matter expert on internet architecture, working closely with product, analytics, and engineering teams to integrate your risk signals into production models.\n\nMust-Have Skills & Qualifications\nDeep Internet & Networking Expertise: Expert-level understanding of how the internet works at a foundational level. You should be intimately familiar with network protocols (TCP/IP, BGP, DNS, HTTP/S, TLS), routing, ASN ecosystems, and complex enterprise network configurations.\n\nStrong Quantitative Acumen: Proven ability to apply mathematical and statistical concepts to real-world problems. You must be able to design quantitative metrics and build logic that scores and sizes risk exposure accurately.\n\nAnalytical Mindset: Exceptional problem-solving skills with a track record of conceptualizing complex, abstract security concepts and breaking them down into measurable data points.\n\nEducational Background: Bachelor’s or Master’s degree in Computer Science, Computer Engineering, Mathematics, Statistics, or a related highly quantitative/technical field.\n\nExperience: 3-5+ years of relevant work experience in network engineering, cyber threat research, risk modeling, or a related domain.\n\nGood-to-Have (Preferred) Skills\nCoding for Signal Creation: Proficiency in Python or R to prototype algorithms and turn your theoretical risk concepts into actual programmatic outputs.\n\nData Querying: Experience with SQL and relational databases to pull, manipulate, and analyze large datasets of asset and configuration data.\n\nBig Data Exposure: Familiarity with big data frameworks (Spark / Hadoop), flat files, complex data types (JSON, XML), and working with APIs.\n\nIndustry Context: Experience working in or adjacent to the cyber insurance, risk modeling, or data science industries.\n\nCertifications: Advanced technical or security certifications (e.g., CISSP, CISM, or advanced Cisco/networking certifications) are a plus, but hands-on expertise matters most.\n\nWho might thrive here\nThis role is a fit for people from many backgrounds. You might be a Security Researcher, Threat Researcher, Penetration Tester or Offensive Security Engineer who knows how attackers find and exploit exposed assets. Or you might come from network engineering, detection engineering, or attack surface management and know exactly how internet-facing infrastructure gets set up and misconfigured. If you've done bug bounty or red team work, or built security data and risk models, and you want to turn that experience into signals that shape a global industry, we'd love to hear from you.\nAI Fluency at CyberCube\nAI is reshaping how work gets done across every function. We value people who are curious about AI, eager to learn, and thoughtful about applying AI tools to work more effectively. AI fluency is part of how we assess every role in our hiring process.\nDon't tick every box? Apply anyway.\nResearch shows the best candidates rarely match a job description point for point. If you're excited about this role and believe you could make an impact, we'd love to hear from you, even if your experience doesn't line up perfectly with everything listed above.\nCyberCube Analytics, Inc. and CyberCube Analytics Europe Limited is an equal opportunity employer. We don’t tolerate discrimination against age, gender, gender identity, gender expression, sexual orientation, race, color, nationality, ethnicity, religion, disability, veteran status, protected genetic information or political affiliation.","description_format":"text","description_chars":6625,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Equity"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Penetration Testing","InsurTech"],"lifecycle":[{"event":"open","at":"2026-10-07T15:39:07Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 4 · green card filings: 4","filings_12m":4,"filings_prev_12m":3,"green_card_filings_12m":4,"median_offered_wage_usd":155000,"route":null,"cap_exempt":false,"checked_at":"2026-10-03T21:08:04+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":3}],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":4,"expected_fill_days":36,"reasons":["conf:3","velocity","win:early"],"computed_at":"2026-10-12T06:55:09Z"},"pay":{"stated_usd_annual":160000,"is_top_pay":false},"html_url":"https://alion.io/job/cybercube-analytics-llc-security-research-engineer-attack-surface-risk-signals","json_url":"https://alion.io/job/cybercube-analytics-llc-security-research-engineer-attack-surface-risk-signals.json","meta":{"generated_at":"2026-10-13T05:05:19Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":8000,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-14T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":2073737},"rest":"https://alion.io/mcp/rest/get_company?id=2073737"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fcybercube-analytics-llc-security-research-engineer-attack-surface-risk-signals"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fcybercube-analytics-llc-security-research-engineer-attack-surface-risk-signals"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fcybercube-analytics-llc-security-research-engineer-attack-surface-risk-signals"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/cybercube-analytics-llc-security-research-engineer-attack-surface-risk-signals\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fcybercube-analytics-llc-security-research-engineer-attack-surface-risk-signals"}]}