Security Researcher- Posture

Every nation has data. Few can protect it. Fewer still can act on it.

Dream is the sovereign AI and national cyber-defense company for governments.

We help nations secure their most critical systems, connect fragmented information at a national scale, and turn their most sensitive data into decisions, all fully sovereign.

This is more than a job. It's a Dream job, where you'll work at a global scale alongside some of the best AI researchers, cyber operators, and government experts in the world.

We defend nations against the most advanced threats in the world with a national security suite that offers AI-native resilience against APTs with visibility, insights and mediation across Posture, CTI, and Detection & Response, all fully sovereign.

We're looking for a Cyber Security Researcher to join the research team within our Posture Management group. Our product is AI-driven, and this is a research role on the research team. You’ll characterize and analyze risks and potential vulnerabilities in enterprise networks (domain- and network-level) and translate those findings into logic built into our product. A core part of the role is helping to build AI agents that emulate threat actors’ flow and mindset, modeling how a real adversary would reason through and traverse an environment to anticipate and detect those paths. 

• 5+ years of experience, including hands-on experience as a security researcher (red team, penetration testing, exploit research, or similar).  
• Implement methods and algorithms to discover network topology, relationships between devices, and potential lateral movement paths 
• Conduct network security assessments to identify weaknesses in customers’ network infrastructure and recommend mitigations to monitor and limit unauthorized access. 
• Research and characterize attack techniques, misconfigurations, and vulnerabilities across enterprise domain and network environments (e.g., Active Directory, network segmentation, identity infrastructure, exposed services).  
• Build POC exploits/attack chains to validate risk hypotheses before they're modeled into the product. Collaborate with product and engineering teams to define how identified risks should be surfaced, prioritized, and remediated for customers.  
• Produce clear technical documentation of research findings, attack paths, and proposed detection logic. 

• Strong analytical thinking and ability to generalize from specific findings to broad detection logic.  
• Deep knowledge of attack techniques, TTPs (Tactics, Techniques, and Procedures), adversary simulations, and threat-hunting methodologies 
• Hands-on experience with Red Team tools, frameworks (e.g., Metasploit, Cobalt Strike, Burp Suite), and custom exploit development 
• Familiarity with the MITRE ATT&CK Framework and its application in Red Team and threat-hunting scenarios 
• Proficiency with scripting and automation languages for tool development, threat detection, and attack simulation 
• Solid understanding of offensive security best practices, vulnerability management, threat detection, and advanced threat analysis 
• Independent, self-driven researcher who can define and pursue research questions with minimal guidance.  
• Comfortable working cross-functionally with product and engineering teams.

If you think this role doesn't fully match your skills but are eager to grow and break glass ceilings, we’d love to hear from you!