Senior Security Research Engineer

About the role

Build realistic enterprises. Connect applications, networks, identities, and third-party services across Azure, AWS, GCP, and on-premises systems, including realistic user activity and security telemetry. Make environments repeatable. Build reusable infrastructure, images, and self-service automation to provision, validate, reset, and retire complete environments. Enable AI training and evaluation.

Deliver interfaces for agent actions, observations, and evidence collection so teams can reliably compare model, agent, and harness changes. Engineer for safe scale. Support concurrent experiments with strong isolation, synthetic data, health checks, recovery, and cost controls. Own capabilities end to end.

Partner with security researchers and AI engineers to ship dependable systems, resolve cross-stack challenges, and mentor engineers.

Doctorate in Statistics, Mathematics, Computer Science, Computer Security, or related field OR Master's Degree in Statistics, Mathematics, Computer Science, Computer Security, or related field AND 3+ years experience in software development lifecycle, large-scale computing, threat analysis or modeling, cybersecurity, vulnerability research, and/or anomaly detection.

OR Bachelor's Degree in Statistics, Mathematics, Computer Science, Computer Security, or related field AND 4+ years experience in software development lifecycle, large-scale computing, threat analysis or modeling, cybersecurity, vulnerability research, and/or anomaly detection.

These requirements include, but are not limited to the following specialized security screenings: Doctorate in Statistics, Mathematics, Computer Science, Computer Security, or related field AND 3+ years experience in software development lifecycle, large-scale computing, threat analysis or modeling, cybersecurity, vulnerability research, and/or anomaly detection.

OR Master's Degree in Statistics, Mathematics, Computer Science, Computer Security, or related field AND 6+ years experience in software development lifecycle, large-scale computing, threat analysis or modeling, cybersecurity, vulnerability research, and/or anomaly detection.

OR Bachelor's Degree in Statistics, Mathematics, Computer Science, Computer Security, or related field AND 8+ years experience in software development lifecycle, large-scale computing, threat analysis or modeling, cybersecurity, vulnerability research, and/or anomaly detection. OR equivalent experience. 3+ years of experience developing software, infrastructure automation, or cloud platforms.

Experience shipping and maintaining software or automation in Python, Go, C#, or TypeScript, using version control, automated tests, and code review. - Experience deploying applications and configuring networks, identities, and storage in at least one of Azure, AWS, or GCP.

Experience connecting services across a second cloud or an on-premises environment. - Experience building infrastructure-as-code modules and CI/CD deployment pipelines using Terraform, Bicep, CloudFormation, or equivalent tools. Experience diagnosing Windows or Linux application failures involving DNS, routing, authentication, or service dependencies using logs, metrics, and system tools.

Experience owning a platform capability from technical design through deployment and operational support, including documenting design decisions and resolving production failures. Configured identity federation, certificate-based authentication, or workload identities using Active Directory, Entra ID, Okta, or another enterprise identity provider.

Built security labs or environment-as-a-service platforms with automated image creation, provisioning, baseline reset, and teardown. Deployed Kubernetes workloads with network policies, service identities, and centralized logging. Automated synthetic user or administrator activity and collected identity, endpoint, or application telemetry for security testing.

Integrated versioned environments into RL training or agent-evaluation pipelines, including checks for configuration drift and state left over from previous runs. Designed and built capture the flag challenges or competitions.