Security Researcher, Push Security
+ Stock options
Employee-powered SaaS security
Open for applications
Employee-powered SaaS security
21-100 employees
Open for applications
+ Stock options
21-100 employees
Company mission
To offer a super scalable way to secure SaaS, by equipping employees to join the fight against attackers and improve their own security.
Role
Who you are
- We’re looking for someone who not only excels in deep technical work but also enjoys sharing their findings—whether through conference presentations, blog posts, or other public forums
- 3+ years of technical cybersecurity experience
- In-depth knowledge of core web technologies like HTTP, JavaScript, and HTML
- Strong coding skills (JS, Python), though professional software development experience is not required
- Experience with public speaking, ideally presenting technical research
- A track record of understanding vulnerabilities and subsequent detection techniques
Desirable
- Experience with technical incident response
- Background in vulnerability research and development
- Knowledge of identity security technologies such as SAML, OIDC, FedCM, WebAuthn, Device Bound Session Credentials, etc
- Published research or conference presentations
What the job involves
- Push Security, a research-driven cybersecurity startup, is looking for a Security Researcher to advance the state-of-the-art in identity attack techniques and use those insights to shape our product roadmap
- We’re searching for a security researcher with a passion for uncovering the latest attack techniques, developing innovative countermeasures, and sharing those insights
- You’ll be part of a small but highly experienced research team, investigating emerging identity attacks and building the technology to prevent them
- Your work will directly influence our product roadmap, from attack PoCs to designing new detection capabilities
- Research and analyze identity-based attacks detected across our customer base
- Develop PoC exploits and detections for potential new attack techniques such as those on our SaaS attacks matrix
- Collaborate with the product team to translate research findings into new security features
- Share your research and insights through blog posts, customer presentations, and conference talks
Our take
The use of SaaS apps has increased tenfold in less than a decade, with organisations now using an average of eighty apps. This increasing uptake comes with an increased risk of security breaches, putting huge strain on internal security teams.
Push Security offers an alternative to restrictive company-wide policies on un-approved apps, which are often ignored and bypassed, and can in turn lead to attacks. By monitoring employee SaaS use, then leveraging automated ChatOps messages to prompt easy security measures, Push enables employees to improve their company’s defences themselves.
Since its launch in July 2022, its tools have been adopted by hundreds of teams and some 50,000 users - such as Tray.io, Upvest, and Reachdesk. Its latest Google Ventures-led funding will enable Push to build on its early signs of traction, gaining momentum as it successfully takes its solution to a wider market.
Kirsty
Company Specialist at Welcome to the Jungle
Insights
Many candidates hear
back within 2 weeks
Company
Funding (2 rounds)
Apr 2023
$15m
SERIES A
Jul 2022
$4m
SEED
Total funding: $19m
Company benefits
- All-remote company
- Flexible Hours
- Open holiday allowance
Company HQ
St Albans, UK
Articles
Leadership
Adam Bateman
(CEO)Former Head of Cyber Defence at globally recognized consultancy MWR InfoSecurity (acquired by F-Secure in 2018). Before co-founding Push Security, they founded and led Countercept - MWR's Managed Detection and Response Division.
Tyrone Erasmus
(CTO)Worked at MWR InfoSecurity with Push Security co-founders Adam Bateman and Jacques Louw as a Security Consultant. Created the tech that drove Countercept, MWR’s Managed Detection and Response service and served as Chief Product Officer until F-Secure's 2018 acquisition of the company.
Jacques Louw
(CPO)Spent over a decade at MWR InfoSecurity with co-founders Adam Bateman and Tyrone Erasmus as a Managing Security Consultant and Technical Director. Joined F-Secure as Technical Director upon its acquisition of MWR, before co-founding Push Security.
Share this job