Security Researcher

Netwrix Corporation

About The Position

Netwrix is seeking a Security Researcher with expertise in Active Directory and Entra ID to join our security research team. This role focuses on hands-on research into Active Directory and Entra ID security: finding misconfigurations, privilege escalation paths, and attack techniques. You'll build and validate proof-of-concepts, work closely with product teams, and grow your research and public speaking profile as part of the team.

Requirements

1 to 3 years of hands on experience in security research, red teaming, penetration testing, or a closely related identity security role, with a focus on Active Directory, Entra ID, Windows, or related identity platforms.
Working knowledge of common AD/Entra ID misconfigurations, privilege escalation paths, and attack techniques, or a strong foundation and a track record of picking these up fast.
Strong problem solving skills, with the ability to take an unfamiliar system or attack surface and break it down into testable hypotheses.
Comfortable using AI tools to speed up research work, whether that's automating repetitive analysis, scripting tooling, or quickly putting together a proof of concept.
Able to work cross functionally with engineering and product teams.
Good verbal and written communication skills in English.
Proficiency in at least one programming or scripting language (C#, PowerShell, Python, etc.).

Nice To Haves

Some experience discovering or analyzing vulnerabilities, misconfigurations, or attack paths, whether in identity systems specifically or security research more broadly.
A tool, script, or side project you've built to solve a security problem, even a small one. We're interested in how you think, not just what you've published.
Interest in or early experience presenting technical work, whether that's internal talks, meetups, local conferences, or writing technical blog posts.
Familiarity with hybrid identity security concepts, including AD to Entra ID synchronization.
Understanding of authentication protocols (Kerberos, NTLM, OAuth, OpenID Connect) and directory replication mechanisms.
Prior contributions to open source security tooling.

Responsibilities

Conduct hands-on research into Active Directory, Windows and Entra ID, identifying misconfigurations, privilege escalation paths, and attack techniques.
Build proof-of-concept exploits and testing methodologies to validate research findings. Using AI tools to speed up research and prototyping (vibe coding a POC, automating repetitive analysis, etc.) is welcome and encouraged.
Work with engineering and product teams to help translate research into product improvements.
Contribute to the Netwrix Blog and Attack Catalog with technical write ups of findings.
Contribute to our open source GitHub repository, including tools such as the free version of PingCastle.
Opportunity to co present or present research at industry conferences (BlackHat, Defcon, RSA, etc.) as your experience grows.