Security Researcher

We are an exciting stealth Enterprise software startup that has recently secured significant seed funding from Team8, a leading venture capital firm in the space!

Joining us at this early stage offers a rare opportunity to play a pivotal role in shaping our success and making a lasting impact. We are on a mission to revolutionize IAM consumption and management. We are looking for brilliant, curious, creative, and team player individuals to join our dynamic team and help us build out our cutting-edge technology.

You will be key in finding and developing novel methods to analyze and integrate with complex software using advanced techniques and AI models. This is a unique opportunity to work on novel research and code analysis techniques, diving deep into the core of customer systems and implementing transformative changes at scale.

Your Role Will Include

Proactively explore emerging identity security and AI-agent ecosystems risks, uncover new opportunities, and help turn original research into impactful product capabilities.

Collaborate with the product and engineering teams to translate findings into detection capabilities and product features.

Create thought-leadership content, including technical blogs, demos, and conference talks.

Serve as Orchid’s internal authority on emerging threats and identity security trends.

Requirements

5+ years of hands-on experience in security research in areas such as cloud/SaaS security, threat/detection research.

Comfortable analyzing network traffic and protocols in unknown server environments.

Track record of driving research initiatives end-to-end - from initial hypothesis to documented, shareable output.

Ability to operate in a fast-paced startup environment, work under pressure, and handle urgent incidents.

Ability to work independently and in a team-oriented, collaborative environment.

Strong communication skills, both written and verbal.

Advantages

Strong working knowledge of identity protocols: Kerberos, SAML, OAuth, OIDC, LDAP, Active Directory.

Published research - blogs, CVEs, conference talks, or security advisories.

Experience working in or alongside product teams to translate research into actual features.

Show more

Show less