Security Researcher

As a Security Researcher for the Axonius Exposures team, you will drive product innovation by performing deep-dive research into vulnerability detection, remediation, and prioritization. You will translate complex research into actionable features that help customers mitigate critical security gaps. This role bridges the gap between technical research and product impact, leveraging AI and asset intelligence to build a market-leading exposure management engine.

Responsibilities

Vulnerability & Threat Research: Conduct technical analysis of emerging CVEs, misconfigurations, and attack vectors across Cloud, On-prem, and IoT/OT environments. Remediation Engineering: Define and prototype effective mitigation strategies, including configuration changes and compensating controls beyond standard patching.

Data-Driven Prioritization: Develop scoring models using Python and SQL that integrate asset criticality with exploitability data to guide customer security workflows. AI Automation: Utilize LLMs and AI tools to automate the parsing of security advisories and scale the mapping of vulnerabilities to organizational assets.

Minimum Qualifications

Experience: At least 3 years of hands-on experience in security research, vulnerability analysis, or penetration testing. Technical Proficiency: Professional experience writing Python scripts for data automation and performing complex data queries using SQL. Security Fundamentals: Deep technical understanding of CVSS, EPSS, MITRE ATT&CK frameworks, and common exploitation techniques.

Network Expertise: Specialized knowledge in network protocols and device communication patterns (identifying device types/vulnerabilities via traffic). Project Leadership: Proven track record of leading independent research projects from problem definition to proof-of-concept (POV).

Preferred Qualifications

Product Experience: Demonstrated ability to work directly with Product and R&D teams to turn research into functional software features. AI Integration: Practical experience applying LLMs to accelerate technical analysis or summarize large-scale threat intelligence. Advanced Remediation: Experience defining complex mitigation strategies for non-standard environments like IoT or OT. #LI-HYBRID #LI-ZR1About Axonius:  Axonius transforms cyber asset intelligence into actionability.

With the Axonius Asset Cloud, customers preemptively tackle high-risk and hard-to-spot threat exposures, misconfigurations, and overspending. The integrated platform brings together data from every system in an organization’s IT infrastructure to optimize mission-critical risk, performance, and cost measures via actionable intelligence.

Covering cyber assets, software, SaaS applications, identities, vulnerabilities, infrastructure, and more, Axonius is the one place to go for Security, IT, and GRC teams to continuously drive actionability across the organization. Cited as one of the fastest-growing cybersecurity startups, with accolades from CNBC, Forbes, and Fortune, Axonius supports millions of assets for leading customers across industries and around the world.

Axonius makes it a priority to invest in our people with competitive compensation and benefits, growth opportunities, community-building, and so much more. Learn more about benefits at Axonius. At Axonius we support a diverse and inclusive workplace and believe in equal employment opportunity. We welcome people of different backgrounds, experiences, abilities and perspectives to apply.

All qualified applicants will receive consideration for employment without regard to race, color, ancestry, religion, age, sex, gender identity, national origin, sexual orientation, citizenship, marital status, disability, or Veteran status. By submitting your application to us, you acknowledge that your personal data will be processed in accordance with our Global Job Candidate Privacy Notice.

Axonius gives customers the confidence to control complexity by mitigating threats, navigating risk, automating response actions, and informing business-level strategy. With solutions for both cyber asset attack surface management (CAASM) and SaaS management, Axonius is deployed in minutes and integrates with hundreds of data sources to provide a comprehensive asset inventory, uncover gaps, and automatically validate and enforce policies.

Cited as one of the fastest-growing cybersecurity...