Senior Security Researcher

About Us At Netwrix, our mission is to revolutionize data security by placing identity at the core - providing unparalleled visibility and control. Engineered and supported by over 900 highly talented, motivated employees and hundreds of trusted partners in nearly every geography, Netwrix solutions are relied upon daily by security professionals across more than 13,500 organizations in over 100 countries around the world. Over the past two decades, Netwrix has expanded its market presence through innovation, organic growth, and strategic acquisitions, and are proud to be backed by renowned private equity firms, TA Associates and Centerbridge Partners. Netwrix maintains a global presence, fostering a remote-first work environment while encouraging and facilitating frequent face-to-face interaction with colleagues, customers, and partners. Position Overview Netwrix is seeking a Security Researcher with expertise in Active Directory and Entra ID to join our security research team. This role focuses on hands-on research into Active Directory and Entra ID security: finding misconfigurations, privilege escalation paths, and attack techniques. You'll build and validate proof-of-concepts, work closely with product teams, and grow your research and public speaking profile as part of the team. Key Responsibilities Conduct hands-on research into Active Directory, Windows and Entra ID, identifying misconfigurations, privilege escalation paths, and attack techniques. Build proof-of-concept exploits and testing methodologies to validate research findings. Using AI tools to speed up research and prototyping (vibe coding a POC, automating repetitive analysis, etc.) is welcome and encouraged. Work with engineering and product teams to help translate research into product improvements. Contribute to the Netwrix Blog and Attack Catalog with technical write ups of findings. Contribute to our open source GitHub repository, including tools such as the free version of PingCastle. Opportunity to co present or present research at industry conferences (BlackHat, Defcon, RSA, etc.) as your experience grows. Required Qualifications 1 to 3 years of hands on experience in security research, red teaming, penetration testing, or a closely related identity security role, with a focus on Active Directory, Entra ID, Windows, or related identity platforms. Working knowledge of common AD/Entra ID misconfigurations, privilege escalation paths, and attack techniques, or a strong foundation and a track record of picking these up fast. Strong problem solving skills, with the ability to take an unfamiliar system or attack surface and break it down into testable hypotheses. Comfortable using AI tools to speed up research work, whether that's automating repetitive analysis, scripting tooling, or quickly putting together a proof of concept. Able to work cross functionally with engineering and product teams. Good verbal and written communication skills in English. Proficiency in at least one programming or scripting language (C#, PowerShell, Python, etc.). Preferred Qualifications Some experience discovering or analyzing vulnerabilities, misconfigurations, or attack paths, whether in identity systems specifically or security research more broadly. A tool, script, or side project you've built to solve a security problem, even a small one. We're interested in how you think, not just what you've published. Interest in or early experience presenting technical work, whether that's internal talks, meetups, local conferences, or writing technical blog posts. Familiarity with hybrid identity security concepts, including AD to Entra ID synchronization. Understanding of authentication protocols (Kerberos, NTLM, OAuth, OpenID Connect) and directory replication mechanisms. Prior contributions to open source security tooling. Our Values At Netwrix, our values guide every action: Next-Level Customer Focus -Customers first, always. We listen, protect, and go the extra mile— because their success is our mission. Excellence - We set high standards and take pride in delivering exceptional results. We celebrate wins, seek constant improvement, and address shortcomings professionally. Transparent Ownership - We celebrate our successes, own up to our mistakes, communicate openly, and face challenges head-on with a genuine commitment to doing the right thing. Winning with Clear Thinking - We value clarity, find straightforward solutions to complex problems, and make swift, effective decisions. Relentless Innovation - We continually seek better ways to serve our customers and stay ahead. We foster creative thinking, and we embrace new approaches. Industry-Leading Expertise - We take pride in our expertise and continuously seek to learn and share knowledge, striving to be the trusted experts our customers rely on. eXceptional Together - We believe in the power of collaboration and diverse perspectives. By valuing each other’s strengths, we achieve outcomes that surpass individual contributions. Join us in a culture where integrity, respect, and hard work are foundational. Be part of a team dedicated to making a lasting impact. Why You’ll Love Working at Netwrix Competitive Health Benefits Continuous Learning and Development Opportunities Team-Oriented, Collaborative, and Innovative Work Environment Regular Company Town Halls to Keep You Informed Opportunities for Career Growth and Advancement We pride ourselves on a culture that truly values employee input across various backgrounds and experiences. We look forward to welcoming new talent who can help us further our mission. Netwrix Corporation and its wholly owned subsidiaries are Equal Opportunity Employers (EEO) and welcome all applicants for employment without regard to race, color, religion, sex, national origin, age, disability, veteran status, or any other protected characteristic under applicable law. Please let us know if you require any accommodation.