Staff Research Engineer - Exposure Intelligence

Role overview Produce timely cybersecurity intelligence that helps technical teams and security leaders understand emerging exposure and decide what deserves attention. The role combines daily operational triage and concise briefings with deeper threat analysis, external writing, and improvements to analytical methods and workflows.

Responsibilities - Monitor a broad range of information sources, assess new disclosures and other developments, and decide which require further investigation. - Run the daily intelligence production cycle, including preparing an internal operations brief and an external digest for stakeholders. - Evaluate exploit maturity, likely attacker interest, and potential impact, communicating judgments and confidence clearly when information is incomplete. - Develop deeper products such as threat assessments with documented methods and confidence ratings, actor or campaign profiles, and focused analysis of vulnerabilities or exposure conditions. - Write public-facing material and contribute to media responses, webinars, and conference presentations in coordination with relevant teams. - Help improve classification standards, analytical methods, source management, and AI-supported workflows.

Requirements - The supplied listing describes a staff-level research engineering position focused on recurring intelligence production, analytical judgment, and clear writing. It does not include the full core qualifications, so specific years of experience or required credentials cannot be stated. - Ability to move between fast operational triage and deeper analysis, and to deliver clear, concise work on a daily cadence. - Applicants must be authorized to work in the United States for any employer without visa sponsorship, according to the listing.

Nice to have - Experience with exposure management, vulnerability analysis, or security domains such as cloud, identity, and OT/IoT. - Familiarity with AI-assisted analysis, scripting or automation with Python or Bash, APIs, and external technical communication. - Experience with vulnerability management platforms, exposure research tools such as Shodan or Censys, OSINT methods, or production tracking tools. - Knowledge of exposure areas beyond CVEs, including credential exposure or shadow AI.

Benefits and work setup - The listing indicates a hybrid role and gives a U.S. base pay range of $137,500–$183,500, with eligibility for variable compensation and benefits including insurance, retirement matching, paid leave, and education assistance.