Cybersecurity Researcher
TypeFull-time job
LocationBerlin
Posted3 hours ago
Berlin • Cybersecurity & AI Startup • Recently Funded
A newly funded cybersecurity startup in Berlin is looking for a Cybersecurity Researcher to join as a team member and help design the core security, identity, and enforcement foundations of a next-generation AI-powered security risk management platform.
We are an early-stage startup founded by experienced cybersecurity leaders with backgrounds in Israeli Intelligence units. We are looking for a hands-on Cybersecurity Researcher. If you are passionate about cybersecurity and AI tech, thrive in fast-paced startup environments, and enjoy building complex platforms from the ground up, this is an opportunity to make a real impact.
We’re building a next-generation cyber enforcement platform that helps enterprises understand, measure, and reduce identity risk at scale. Our goal is to turn complex identity and security data into clear, actionable risk insights that CISOs and CTOs can trust. You will work from scratch on core platform components from day one, shaping how modern enterprises manage and reason about risk using cloud-native systems and AI-driven analysis and automated enforcement through AI Agents.
Key Responsibilities
Research how identity works across platforms: discovery, permission schemes, hidden attack paths, and the behavior vendors don’t document
Connect the dots across environments: attack paths that span SaaS, cloud, and on-prem
Turn research into detection logic and rule content that ships in the product
Work directly with the founders, product, and engineering to shape what we build next
Build the research tooling you need, and share your research through open-source tools and write-ups
Must have
4+ years in security research, detection engineering, or a closely related role
Hands-on experience with SaaS and cloud platforms such as Microsoft 365 / Entra ID, Google Workspace, Okta, Salesforce, AWS, Azure, or GCP, including their identity and permission models
Experience reverse engineering APIs: intercepting traffic, finding undocumented endpoints, and testing behavior against what vendor docs claim
Strong Python, written so others can read, run, and maintain it
Solid understanding of identity and access concepts: OAuth, SAML, SSO, service accounts, API tokens, delegated permissions
Ability to turn research findings into concrete detection logic
Based in Berlin or willing to relocate
Comfortable operating under ambiguity in an early-stage startup
Knowledge of agent related Identity landscape and attack vectors
Nice to have
Offensive security experience: red team, pentesting, or offensive research
Active Directory and hybrid identity
Published research, conference talks, CVEs, or open-source tools
Detection-as-code experience, such as Sigma or KQL
Graph-based attack path analysis, for example with Neo4j
You have a CVE, or a story about why you didn’t get one
Benefits
Team Member Equity — ESOPs in a cybersecurity company.
Competitive Compensation — salary aligned with market, flexible early-stage arrangements possible.
Fresh Funding Secured — immediate runway to build, hire, and execute fast.
Security Contribution — contribute to security architecture across identity, AI agents, and enforcement.
High Autonomy — freedom to design and build without corporate overhead.
Work with a Technical CEO — fast iteration, strong alignment, clear direction.
Cutting-Edge Domain — identity security, SaaS-to-SaaS access, AI agent governance.
Massive Learning Curve — quickly gain depth in cybersecurity, identity, and AI systems.
Fast Career Path — opportunity evolve into leadership as we scale the team
Berlin Location — top-tier tech environment with strong cybersecurity and AI ecosystems.
Direct Impact — your architecture and code become the foundation of the entire platform.
Best Equipment and Tools - High quality equipment and modern tools to help you do your best work from day one.
Team Offsites - Regular team offsites designed to build strong connections, alignment, and shared momentum.
Find more English Speaking Jobs in Germany on Arbeitnow
A newly funded cybersecurity startup in Berlin is looking for a Cybersecurity Researcher to join as a team member and help design the core security, identity, and enforcement foundations of a next-generation AI-powered security risk management platform.
We are an early-stage startup founded by experienced cybersecurity leaders with backgrounds in Israeli Intelligence units. We are looking for a hands-on Cybersecurity Researcher. If you are passionate about cybersecurity and AI tech, thrive in fast-paced startup environments, and enjoy building complex platforms from the ground up, this is an opportunity to make a real impact.
We’re building a next-generation cyber enforcement platform that helps enterprises understand, measure, and reduce identity risk at scale. Our goal is to turn complex identity and security data into clear, actionable risk insights that CISOs and CTOs can trust. You will work from scratch on core platform components from day one, shaping how modern enterprises manage and reason about risk using cloud-native systems and AI-driven analysis and automated enforcement through AI Agents.
Key Responsibilities
Research how identity works across platforms: discovery, permission schemes, hidden attack paths, and the behavior vendors don’t document
Connect the dots across environments: attack paths that span SaaS, cloud, and on-prem
Turn research into detection logic and rule content that ships in the product
Work directly with the founders, product, and engineering to shape what we build next
Build the research tooling you need, and share your research through open-source tools and write-ups
Must have
4+ years in security research, detection engineering, or a closely related role
Hands-on experience with SaaS and cloud platforms such as Microsoft 365 / Entra ID, Google Workspace, Okta, Salesforce, AWS, Azure, or GCP, including their identity and permission models
Experience reverse engineering APIs: intercepting traffic, finding undocumented endpoints, and testing behavior against what vendor docs claim
Strong Python, written so others can read, run, and maintain it
Solid understanding of identity and access concepts: OAuth, SAML, SSO, service accounts, API tokens, delegated permissions
Ability to turn research findings into concrete detection logic
Based in Berlin or willing to relocate
Comfortable operating under ambiguity in an early-stage startup
Knowledge of agent related Identity landscape and attack vectors
Nice to have
Offensive security experience: red team, pentesting, or offensive research
Active Directory and hybrid identity
Published research, conference talks, CVEs, or open-source tools
Detection-as-code experience, such as Sigma or KQL
Graph-based attack path analysis, for example with Neo4j
You have a CVE, or a story about why you didn’t get one
Benefits
Team Member Equity — ESOPs in a cybersecurity company.
Competitive Compensation — salary aligned with market, flexible early-stage arrangements possible.
Fresh Funding Secured — immediate runway to build, hire, and execute fast.
Security Contribution — contribute to security architecture across identity, AI agents, and enforcement.
High Autonomy — freedom to design and build without corporate overhead.
Work with a Technical CEO — fast iteration, strong alignment, clear direction.
Cutting-Edge Domain — identity security, SaaS-to-SaaS access, AI agent governance.
Massive Learning Curve — quickly gain depth in cybersecurity, identity, and AI systems.
Fast Career Path — opportunity evolve into leadership as we scale the team
Berlin Location — top-tier tech environment with strong cybersecurity and AI ecosystems.
Direct Impact — your architecture and code become the foundation of the entire platform.
Best Equipment and Tools - High quality equipment and modern tools to help you do your best work from day one.
Team Offsites - Regular team offsites designed to build strong connections, alignment, and shared momentum.
Find more English Speaking Jobs in Germany on Arbeitnow
Apply on Arbeitnow →
Job sourced from Arbeitnow. Applications happen directly on the original platform — we never collect your data.