Senior Fraud Researcher

Role overview

Help establish a new security research function focused on cloud threats and digital identity. The work spans hands-on threat hunting, data-led investigation, and publishing research for security practitioners; early contributions will shape the team’s tools, ways of working, and research priorities.

Responsibilities - Investigate cloud security threats through practical research and threat hunting. - Build and improve research tooling and supporting workflows. - Develop a research agenda and contribute to the team’s operating practices. - Turn findings into clear publications for security professionals. - Collaborate with colleagues while taking ownership of independent work.

Requirements - At least five years of hands-on security research experience, including two or more years focused on cloud security. - Practical programming or scripting experience in JavaScript, Java, or Python. - Strong understanding of web architecture, including the OSI model, REST APIs, microservices, DNS, and TLS. - Ability to work independently with limited supervision and collaborate effectively in a changing team environment. - Fluent written and spoken English.

Nice to have - Familiarity with identity and access protocols such as OAuth 2.0, OpenID Connect, or FIDO2 WebAuthn. - Knowledge of new-account fraud and account takeover methods, including credential stuffing, phishing, and bot-detection evasion. - Experience with browser fingerprinting through JavaScript APIs.

Benefits and work setup The listing describes a flexible, collaborative work environment and offers paid time off and holidays, parental leave, healthcare options, retirement programs, education reimbursement, and commuter support in some locations.