Security Researcher- Posture

Description:

Every nation has data. Few can protect it. Fewer still can act on it.

Dream is the sovereign AI and national cyber-defense company for governments.

We help nations secure their most critical systems, connect fragmented information at a national scale, and turn their most sensitive data into decisions, all fully sovereign.

This is more than a job. It's a Dream job, where you'll work at a global scale alongside some of the best AI researchers, cyber operators, and government experts in the world.

We defend nations against the most advanced threats in the world with a national security suite that offers AI-native resilience against APTs with visibility, insights and mediation across Posture, CTI, and Detection & Response, all fully sovereign.

We're looking for a Cyber Security Researcher to join the research team within our Posture Management group. Our product is AI-driven, and this is a research role on the research team. You’ll characterize and analyze risks and potential vulnerabilities in enterprise networks (domain- and network-level) and translate those findings into logic built into our product. A core part of the role is helping to build AI agents that emulate threat actors’ flow and mindset, modeling how a real adversary would reason through and traverse an environment to anticipate and detect those paths. 

• 5+ years of experience, including hands-on experience as a security researcher (red team, penetration testing, exploit research, or similar).  
• Implement methods and algorithms to discover network topology, relationships between devices, and potential lateral movement paths 
• Conduct network security assessments to identify weaknesses in customers’ network infrastructure and recommend mitigations to monitor and limit unauthorized access. 
• Research and characterize attack techniques, misconfigurations, and vulnerabilities across enterprise domain and network environments (e.g., Active Directory, network segmentation, identity infrastructure, exposed services).  
• Build POC exploits/attack chains to validate risk hypotheses before they're modeled into the product. Collaborate with product and engineering teams to define how identified risks should be surfaced, prioritized, and remediated for customers.  
• Produce clear technical documentation of research findings, attack paths, and proposed detection logic.