Senior Security Researcher in United States Embassy at Jobgether

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Senior Security Researcher based in United States.

This role offers the opportunity to conduct advanced security research focused on identity platforms, including Active Directory, Windows, and Entra ID environments.
You will investigate emerging attack techniques, discover security weaknesses, and develop proof-of-concept solutions that improve protection against real-world threats.
The position combines hands-on technical research, product collaboration, and knowledge sharing within an innovative security-focused environment.
You will work alongside engineering teams to transform research discoveries into practical security improvements and customer value.
The role encourages experimentation with AI-powered tools to accelerate analysis, automation, and security research workflows.
This is an ideal opportunity for a security professional looking to expand their expertise, contribute to the security community, and grow their technical profile.

The Senior Security Researcher will perform in-depth security research across identity and access management technologies, translating findings into actionable improvements and industry knowledge. This role requires strong technical curiosity, problem-solving abilities, and collaboration with product and engineering teams.

• Conduct hands-on security research across Active Directory, Windows, and Entra ID environments to identify vulnerabilities, misconfigurations, privilege escalation paths, and attack techniques.
• Design, develop, and validate proof-of-concept exploits, testing methodologies, and security research tools.
• Leverage AI-powered tools to accelerate research activities, automate repetitive analysis, improve prototyping, and enhance proof-of-concept development.
• Collaborate with engineering and product teams to translate research findings into product enhancements and security improvements.
• Create technical documentation, blog posts, attack research content, and other materials to communicate findings effectively.
• Contribute to open-source security projects and research tooling initiatives.
• Support knowledge sharing through technical presentations, internal discussions, and potentially industry conferences.
• Analyze evolving identity security threats and contribute to improving defensive strategies and customer protection.
• Continuously expand technical expertise across identity security, authentication systems, and emerging attack methods.

The ideal candidate is a security researcher with practical experience analyzing identity systems and discovering attack paths. They should combine strong technical skills with curiosity, communication abilities, and the ability to collaborate effectively with cross-functional teams.

• 1–3 years of hands-on experience in security research, red teaming, penetration testing, vulnerability research, or a related identity security role.
• Strong knowledge of Active Directory, Entra ID, Windows security concepts, or related identity platforms.
• Understanding of common identity security weaknesses, privilege escalation techniques, and attack methodologies.
• Ability to investigate unfamiliar systems, develop hypotheses, and break down complex security challenges into testable approaches.
• Experience building scripts, tools, or proof-of-concept solutions using at least one programming or scripting language such as C#, PowerShell, or Python.
• Comfortable using AI tools to improve research efficiency, automate workflows, and accelerate security experimentation.
• Ability to collaborate effectively with engineering and product teams.
• Strong written and verbal communication skills in English.
• Experience analyzing vulnerabilities, security misconfigurations, or attack paths is preferred.
• Familiarity with hybrid identity environments, including synchronization between Active Directory and Entra ID.
• Knowledge of authentication protocols such as Kerberos, NTLM, OAuth, OpenID Connect, and directory replication mechanisms is a plus.
• Experience contributing to open-source security tools or presenting technical research is beneficial.

• Competitive health benefits package.
• Continuous learning and professional development opportunities.
• Collaborative, innovative, and team-oriented work environment.
• Opportunities for career growth and advancement.
• Regular company-wide meetings to stay connected and informed.
• Opportunity to contribute to impactful cybersecurity research and industry-leading security solutions.
• Remote-first work environment with opportunities for collaboration and knowledge sharing.
• Inclusive workplace culture that values diverse perspectives, expertise, and employee contributions.