Security Researcher

As a Senior Security Researcher for the Axonius Exposures team, you will conduct research into vulnerability detection, remediation, and prioritization to enhance our asset intelligence platform. You will lead end-to-end research projects, collaborating directly with Product and Development teams to convert technical research into product features. You will analyze large-scale security data, automate workflows, and prototype logic to address enterprise attack surfaces. This is a high-impact role where your research directly shapes how our customers identify and mitigate their most critical security gaps.

Responsibilities

• Lead end-to-end security research projects focusing on vulnerability detection, risk prioritization, and exposure management logic.
• Utilize Python, SQL, and AI/LLM tools to build data analysis pipelines, automate threat research, and prototype research tools.
• Research and define remediation strategies, compensating controls, and configuration-based mitigations beyond standard patching.
• Partner weekly with Product and Engineering teams to transform technical research into production-ready product capabilities.

Minimum Qualifications

• 4+ years of professional experience in security research, vulnerability analysis, or penetration testing.
• Demonstrated proficiency with Python for scripting/automation and SQL for querying complex security data sets.
• Hands-on experience integrating AI/LLMs into technical workflows to accelerate data analysis, parsing, or research output.
• Practical understanding of security frameworks and metrics including CVSS, EPSS, and MITRE ATT&CK.

Preferred Qualifications

• Prior experience in B2B SaaS or enterprise cybersecurity product environments.
• Experience in exposure management, attack surface management (ASM), or enterprise risk prioritization.
• Experience creating custom prioritization and scoring algorithms combining vulnerability telemetry with asset criticality.
• Deep knowledge of non-patching mitigation strategies, including registry tweaks, network policy shifts, and configuration hardening.
• Proven track record of framing open-ended security problems into scalable software feature requirements.

#LI-HYBRID, #LI-ZR1

About Axonius: 

Axonius transforms cyber asset intelligence into actionability. With the Axonius Asset Cloud, customers preemptively tackle high-risk and hard-to-spot threat exposures, misconfigurations, and overspending. The integrated platform brings together data from every system in an organization’s IT infrastructure to optimize mission-critical risk, performance, and cost measures via actionable intelligence.

Covering cyber assets, software, SaaS applications, identities, vulnerabilities, infrastructure, and more, Axonius is the one place to go for Security, IT, and GRC teams to continuously drive actionability across the organization. Cited as one of the fastest-growing cybersecurity startups, with accolades from CNBC, Forbes, and Fortune, Axonius supports millions of assets for leading customers across industries and around the world.

Axonius makes it a priority to invest in our people with competitive compensation and benefits, growth opportunities, community-building, and so much more. Learn more about benefits at Axonius.

At Axonius we support a diverse and inclusive workplace and believe in equal employment opportunity. We welcome people of different backgrounds, experiences, abilities and perspectives to apply. All qualified applicants will receive consideration for employment without regard to race, color, ancestry, religion, age, sex, gender identity, national origin, sexual orientation, citizenship, marital status, disability, or Veteran status.

Axonius participates in E-Verify. To learn more, please review the E-Verify Participation Poster (PDF) and the Right to Work Poster (PDF)****. By submitting your application to us, you acknowledge that your personal data will be processed in accordance with our Global Job Candidate Privacy Notice.