Application Security Researcher

About the role

Orchid Security is looking for an Application Security Researcher to help shape its AI‑driven identity security platform. You will analyse real‑world environments, uncover attack vectors and translate your expertise into actionable AI workflows that protect Fortune 500 enterprises.

Key responsibilities

• Analyse large‑scale data to identify identity‑related attack opportunities and improve detection accuracy.
• Encode security expertise into AI‑driven prompts, decision logic and agentic workflows for Orchid’s analysis engine.
• Collaborate with the AI engineering team to design and ship AI agents that detect authentication bypasses, privilege escalation and credential exposure.
• Research chaining vulnerabilities, logic flaws and complex attack paths, contributing to the team’s research direction.
• Work closely with product and engineering to ensure AI‑driven decisions reflect real‑world application behaviour.
• Participate in customer engagements from proof‑of‑concept to onboarding, presenting findings to technical and business stakeholders.

Required profile

• Proven cybersecurity expertise in offensive or defensive research (e.g., penetration testing, malware analysis, network forensics, incident response).
• Hands‑on programming ability with experience in code‑level analysis across modern development stacks.
• Comfort operating in a fast‑paced startup environment and delivering under pressure.
• Clear communication of complex technical concepts.
• Team‑player mindset thriving in high‑impact settings.

Required skills

• Cybersecurity research
• Penetration testing
• Malware analysis
• Network forensics
• Incident response
• Programming for code analysis

What we offer

• Competitive benefits and stock options.
• Opportunity to influence the future of security infrastructure.
• Purpose‑driven workplace supporting local communities.