We're looking for an AI Researcher to build the agents that turn our offensive knowledge into defensive action.
You'll build agents that reason from a proven attack path to the specific control changes that break it - EDR policy, firewall and segmentation rules, conditional access, detection content, cloud IAM, GPO - apply or stage those changes in the customer's environment, and then prove the fix by re-running the attack.
That last part is why this is tractable. Most defensive AI has no ground truth and gets graded on whether its advice sounds reasonable. Ours gets graded on whether the attack still works. You will have a real outcome signal on a short loop, and hundreds of thousands of prior tests to learn from. It is also why this is hard. These agents run inside customer tenants and modify production security controls. A bad change is an outage or a new hole in someone's defense. The reasoning problem and the safety problem are the same problem here, and you will own both.
The goal is closed-loop defense: find, fix, verify, running autonomously at enterprise scale. If you want to work on agents where the feedback is real and the stakes are real, this is the job for you.
Build the reasoning systems that map proven attack paths and exploitation telemetry to specific, applicable control changes, ranked by effectiveness against operational blast radius.
Turn our pentest data into training and evaluation data. Extract the signal of why an attack succeeded in one environment and failed in another.
Design and run counterfactual experiments in representative test environments: would this change have broken this attack chain, what does it cost operationally, and does it generalize beyond the tenant it was learned in.
Design the reasoning layer over heterogeneous control planes so an agent can work across vendor APIs with different policy models without a hardcoded playbook per product.
Design the safety architecture for autonomous change — dry-run and simulation, blast-radius classification, approval gates for high-impact actions, staged rollout, rollback, and an audit trail a customer's change board will accept.
Work with our attack engineers and detection engineers to define target agent behavior and diagnose failure modes: ineffective remediations, over-broad changes, business-breaking policy edits, and recommendations that look right and don't hold on re-test.
Own problems end to end in a 0→1 environment where requirements are ambiguous, systems move fast, and reliability matters, because the output lands in someone's production security posture.
What You'll Bring
Qualification
Background in detection engineering
Preferred
Background in detection engineering, purple teaming, security engineering, offensive security, or incident response.
Hands-on familiarity with security control planes and their APIs and policy models: EDR (CrowdStrike, SentinelOne, Defender), firewalls and segmentation (Palo Alto, Fortinet), identity and conditional access (Entra ID, Okta), SIEM and detection content (Splunk, Sentinel), cloud IAM, WAF, MDM, and GPO.
Experience with causal or counterfactual inference, or with graph reasoning, planning, and search over large state spaces. Familiarity with Neo4j and attack-path analysis.
Experience building automation that takes write actions in production systems, along with the safety and change-management machinery around it.
Experience with adversarial robustness or prompt injection, particularly where an agent consumes untrusted input from the environment it operates in.
Experience integrating ML into production, multi-tenant SaaS, or running ML systems in customer-controlled or air-gapped environments.
