Cloud Security Researcher

Varonis

10d

About The Position

Varonis is developing an autonomous data security platform designed to protect data from the inside out and help customers reduce risk with minimal human effort. The Cloud Security Researcher will investigate security issues and vulnerabilities in cloud environments and SaaS applications, develop detection and analysis capabilities, and collaborate with internal R&D teams to apply research to Varonis products. The role also includes threat hunting, advising customers on security hardening, improving existing algorithms, and communicating research through blogs and publications.

Requirements

• At least 8 years of experience as an on-premises or cloud security researcher.
• Knowledge and experience researching IaaS platforms such as AWS, Azure, or GCP.
• Experience identifying and analyzing trends or patterns related to security incidents and abnormal behavior.
• In-depth understanding of organizational security, risks, and potential attack vectors across organizational perimeters.
• Understanding of security issues, attack vectors, and related security trends.
• At least 2 years of hands-on programming and scripting experience in C++ or Python.
• Passion for conducting customer-value-driven research.
• Strong verbal and written communication skills in English.
• Ability to solve problems effectively and creatively while maintaining flexibility.

Nice To Haves

• Vulnerability research experience or proven bug bounty experience.
• Experience analyzing large datasets.

Responsibilities

• Research new security issues and vulnerabilities in cloud environments and SaaS applications.
• Write proof-of-concept code, threat detections, and analytical algorithms.
• Analyze logs and user activity behavior in cloud environments and SaaS applications.
• Hunt threat actors and insider threats.
• Collaborate with company R&D groups to implement research.
• Evaluate and recommend steps to harden customers’ cloud environments and SaaS applications.
• Optimize existing algorithms to reduce false positives and increase product value.
• Write cybersecurity-oriented blogs and publications.
• Follow and evaluate new security threats, attack vectors, and technologies.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed