Security Researcher- Posture

Описание

Dream is a sovereign AI and national cyber-defense company for governments, helping nations secure critical systems and turn sensitive data into decisions.

Responsibilities

• Characterize and analyze risks and potential vulnerabilities in enterprise networks (domain- and network-level) and translate those findings into logic built into the product
• Help build AI agents that emulate threat actors’ flow and mindset, modeling how a real adversary would reason through and traverse an environment to anticipate and detect those paths
• Implement methods and algorithms to discover network topology, relationships between devices, and potential lateral movement paths
• Conduct network security assessments to identify weaknesses in customers’ network infrastructure and recommend mitigations to monitor and limit unauthorized access
• Research and characterize attack techniques, misconfigurations, and vulnerabilities across enterprise domain and network environments (e.g., Active Directory, network segmentation, identity infrastructure, exposed services)
• Build POC exploits/attack chains to validate risk hypotheses before they're modeled into the product
• Collaborate with product and engineering teams to define how identified risks should be surfaced, prioritized, and remediated for customers
• Produce clear technical documentation of research findings, attack paths, and proposed detection logic

Requirements

• 5+ years of experience, including hands-on experience as a security researcher (red team, penetration testing, exploit research, or similar)
• Strong analytical thinking and ability to generalize from specific findings to broad detection logic
• Deep knowledge of attack techniques, TTPs (Tactics, Techniques, and Procedures), adversary simulations, and threat-hunting methodologies
• Hands-on experience with Red Team tools, frameworks (e.g., Metasploit, Cobalt Strike, Burp Suite), and custom exploit development
• Familiarity with the MITRE ATT&CK Framework and its application in Red Team and threat-hunting scenarios
• Proficiency with scripting and automation languages for tool development, threat detection, and attack simulation
• Solid understanding of offensive security best practices, vulnerability management, threat detection, and advanced threat analysis
• Independent, self-driven researcher who can define and pursue research questions with minimal guidance
• Comfortable working cross-functionally with product and engineering teams