Location: Hybrid in New York or San Francisco, or remote in the US.

Key Responsibilities

• Design Risk Signals: Develop innovative, quantitative signals that accurately measure a company’s exposure to cyber attacks based on their network architecture, asset configurations, and internet footprint.
• Quantify the Unquantifiable: Translate theoretical cybersecurity concepts and complex network topologies into empirical, actionable risk metrics and assumptions.
• Architectural Deep-Dives: Evaluate and extract meaningful insights from how organizations deploy and configure internet-facing protocols, cloud infrastructure, and enterprise networks.
• Threat Landscape Research: Conduct in-depth research on emerging cyber threats (e.g., critical vulnerabilities, ransomware, trending exploits, data breach techniques) and map them to underlying asset configurations.
• Cross-Functional Collaboration: Serve as the subject matter expert on internet architecture, working closely with product, analytics, and engineering teams to integrate your risk signals into production models.

Must-Have Skills & Qualifications

• Deep Internet & Networking Expertise: Expert-level understanding of how the internet works at a foundational level. You should be intimately familiar with network protocols (TCP/IP, BGP, DNS, HTTP/S, TLS), routing, ASN ecosystems, and complex enterprise network configurations.
• Strong Quantitative Acumen: Proven ability to apply mathematical and statistical concepts to real-world problems. You must be able to design quantitative metrics and build logic that scores and sizes risk exposure accurately.
• Analytical Mindset: Exceptional problem-solving skills with a track record of conceptualizing complex, abstract security concepts and breaking them down into measurable data points.
• Educational Background: Bachelor’s or Master’s degree in Computer Science, Computer Engineering, Mathematics, Statistics, or a related highly quantitative/technical field.
• Experience: 3+ years in network engineering, security research, threat research or attack surface management.

Good-to-Have (Preferred) Skills

• Coding for Signal Creation: Proficiency in Python or R to prototype algorithms and turn your theoretical risk concepts into actual programmatic outputs.
• Data Querying: Experience with SQL and relational databases to pull, manipulate, and analyze large datasets of asset and configuration data.
• Big Data Exposure: Familiarity with big data frameworks (Spark / Hadoop), flat files, complex data types (JSON, XML), and working with APIs.

Who might thrive here
This role is a fit for people from many backgrounds. You might be a Security Researcher, Threat Researcher, Penetration Tester or Offensive Security Engineer who knows how attackers find and exploit exposed assets. Or you might come from network engineering, detection engineering, or attack surface management and know exactly how internet-facing infrastructure gets set up and misconfigured.

Why you'll love it here

• Competitive salary, 4% 401(k) match, and unlimited PTO
• Premium health coverage (medical, dental, vision) with CyberCube covering your full deductible
• Generous paid parental leave
• Work abroad for up to three months a year with approval
• Company-paid learning and development, plus mentorship and secondment programs
• Dependent care assistance

AI Fluency at CyberCube

AI is reshaping how work gets done across every function. We value people who are curious about AI, eager to learn, and thoughtful about applying AI tools to work more effectively. AI fluency is part of how we assess every role in our hiring process.

Don't tick every box? Apply anyway.

Research shows the best candidates rarely match a job description point for point. If you're excited about this role and believe you could make an impact, we'd love to hear from you, even if your experience doesn't line up perfectly with everything listed above.

CyberCube Analytics, Inc. and CyberCube Analytics Europe Limited is an equal opportunity employer. We don’t tolerate discrimination against age, gender, gender identity, gender expression, sexual orientation, race, color, nationality, ethnicity, religion, disability, veteran status, protected genetic information or political affiliation.

Compensation: $140K - $160K