Cyber Security Researcher

We are looking for a Security Researcher with 4+ years of experience in cybersecurity, data security, or a related field. The candidate will research real-world data breaches, analyze attacker and insider behavior, and work closely with detection engineers to develop detection rules and classifiers for our product. The role focuses on identifying how sensitive data is exposed, accessed, stolen, or misused across applications, cloud environments, and data sources.

Responsibilities:

• The candidate will research data breach incidents, data exfiltration techniques, insider threats, and cloud security misconfigurations. They will help develop and test detection rules for identifying sensitive information such as personal data, financial records, health data, credentials, secrets, and intellectual property. The role also involves analyzing logs and access patterns to identify unusual data activity, unauthorized sharing, mass downloads, and privilege misuse.
• The candidate will study security risks across cloud data stores, databases, and SaaS applications. They will map detection logic to security frameworks such as MITRE ATT& CK and relevant regulatory requirements, including GDPR, India's DPDP Act, HIPAA, and PCI DSS. Additional responsibilities include creating test datasets, simulating attacks to validate detection accuracy, reducing false positives, and writing Python scripts to automate research and testing.

Requirements:

• Candidates should have at least 4 years of experience in cybersecurity or a related field, along with a degree in computer science, information technology, or cybersecurity, or an equivalent level of practical experience. They should have a strong understanding of networking, operating systems, web applications, cloud environments, and how data is stored and transferred.
• A good understanding of data security concepts, including encryption, access control, data classification, and Data Loss Prevention (DLP), is required. Candidates should also have basic familiarity with at least one cloud platform and its Identity and Access Management (IAM) model. Strong analytical skills, attention to detail, curiosity, and the ability to document and communicate research findings clearly are essential.

Good to Have:

• Experience with DLP, DSPM, DAM, or SIEM tools is an advantage.
• Familiarity with regular expressions, pattern matching, or basic machine learning and natural language processing for text classification is desirable.
• Participation in Capture the Flag (CTF) competitions, bug bounty programs, or projects involving cloud misconfigurations and data exposure will be beneficial.
• Awareness of privacy regulations and relevant security certifications, such as CompTIA Security+, AWS Certified Security - Specialty, or CCSK, is also preferred.