Senior Security Researcher

As a Senior Security Researcher for the Axonius Exposures team, you will conduct research into vulnerability detection, remediation, and prioritization to enhance our asset intelligence platform. You will lead end-to-end research projects, collaborating directly with Product and Development teams to convert technical research into product features. You will analyze large-scale security data, automate workflows, and prototype logic to address enterprise attack surfaces. This is a high-impact role where your research directly shapes how our customers identify and mitigate their most critical security gaps.

Responsibilities

• Lead end-to-end security research projects focusing on vulnerability detection, risk prioritization, and exposure management logic.
• Utilize Python, SQL, and AI/LLM tools to build data analysis pipelines, automate threat research, and prototype research tools.
• Research and define remediation strategies, compensating controls, and configuration-based mitigations beyond standard patching.
• Partner weekly with Product and Engineering teams to transform technical research into production-ready product capabilities.

Minimum Qualifications

• 4+ years of professional experience in security research, vulnerability analysis, or penetration testing.
• Demonstrated proficiency with Python for scripting/automation and SQL for querying complex security data sets.
• Hands-on experience integrating AI/LLMs into technical workflows to accelerate data analysis, parsing, or research output.
• Practical understanding of security frameworks and metrics including CVSS, EPSS, and MITRE ATT&CK.

Preferred Qualifications

• Prior experience in B2B SaaS or enterprise cybersecurity product environments.
• Experience in exposure management, attack surface management (ASM), or enterprise risk prioritization.
• Experience creating custom prioritization and scoring algorithms combining vulnerability telemetry with asset criticality.
• Deep knowledge of non-patching mitigation strategies, including registry tweaks, network policy shifts, and configuration hardening.
• Proven track record of framing open-ended security problems into scalable software feature requirements.

#LI-HYBRID, #LI-ZR1