Senior Cyber Researcher

Grip Security is looking for a Senior Cyber Researcher to join our growing Cyber Research team!

We are a fast-growing startup in the software-as-a-service and AI Security industry. We provide innovative solutions to securing the whole organization-to-SaaS surface. (More details: https://grip.security)

Using the newest technologies, we're working on solving a huge problem all enterprises face today; to govern the accessibility of all its employees to all 3rd party vendors (GitHub, SendGrid, Atlassian, and thousands more!), and to make sure there is no leftover/unwanted access to any of the organization's SaaS and AI assets. The SaaS and AI Security field is complex and challenging. Therefore, we're looking for super-talented people, who are not afraid of technical challenges and breaking down barriers to achieve good solutions.

The job

We are looking for a Senior Cyber Researcher who will be responsible for identifying, analyzing, and providing mitigation options for emerging cyber threats and vulnerabilities in SaaS environments. As a Senior Cyber Researcher in Grip, you’ll lead and contribute to discovering new attack vectors, developing detection and defense techniques, and providing actionable intelligence to strengthen our products and protect our customers.

You will

• Conduct proactive research on emerging threats, vulnerabilities, and attack techniques relevant to SaaS and cloud environments.
• Collaborate with engineering and product teams to translate research findings into product features and security controls.
• Develop proof-of-concept and detection mechanisms to validate and demonstrate risks.
• Stay up-to-date with the latest trends in cyber threats, security tools, and industry best practices.

Requirements

• 5+ years of professional experience in cybersecurity research, threat intelligence, or a related field.
• Deep understanding of SaaS cybersecurity threats and attack techniques involving SaaS, cloud, or web technologies.
• Hands-on experience with threat intelligence, network research, penetration testing, Identity and Access Management or Systems research
• Proficiency in programming/scripting languages such as Python
• Strong analytical and problem-solving skills with a passion for research and innovation.
• Ability to communicate complex technical findings clearly to both technical and non-technical audiences.
• Experience working in a fast-paced, dynamic environment.
• Relevant certifications (e.g., OSCP, CEH, GXPN) are an advantage.

Bonus Points

• Prior experience in SaaS security research, SSPM, ITDR and other SaaS security related fields.
• Familiarity with security frameworks and compliance standards.
• Contributions to the security research community (e.g., published CVEs, conference talks, open-source tools).