CYBRET AI
Remote
Norway and Europe preferred
Full-time
Early hire with equity
CYBRET AI is building Autonomous Security Infrastructure for modern organizations operating in complex, distributed, cloud-native environments.
Our ambition is to move cybersecurity away from reactive, human-dependent workflows and toward continuous, intelligent, autonomous security. We design systems that combine human judgment where it matters with fully autonomous decision-making where speed, scale, and precision are required.
We make a strict distinction between automation and autonomy.
CYBRET AI does not rely on static rules or predefined playbooks. Our systems understand context, reason over attack surfaces and exposure, assess real-world consequences, and take risk-based decisions. Humans are involved only when escalation is necessary.
Our primary focus is Exposure and Vulnerability Management as a decision system, not a reporting layer.
Instead of listing CVEs or producing noisy scan results, our platform understands real attack surfaces, realistic attack paths, business criticality, identity relationships, trust boundaries, and how modern attackers chain exposures in practice.
CYBRET AI answers questions such as:
• What can actually be exploited right now
• What creates real risk for the organization
• What actions reduce risk most effectively
We are building toward Azure, AWS, and Google Cloud Marketplace launches, with cloud-agnostic design as a core principle.
This is a senior security role with deep technical responsibility and real ownership.
You will help define how exposure, risk, and exploitability are modeled, analyzed, and acted upon inside autonomous security systems. Your work directly shapes how CYBRET AI reasons about security decisions.
You will work across cloud security, identity, network security, detection engineering, and security architecture, closely influencing both product logic and technical direction.
Design and improve how CYBRET AI models attack surfaces across cloud, identity, network, and application layers
Identify real-world attack paths and exploit chains rather than theoretical vulnerabilities
Develop risk scoring and prioritization beyond CVSS
Incorporate exploitability, exposure, identity context, and business impact into decision-making
Design and evaluate security controls across Azure, AWS, and GCP
Work deeply with identity systems, permissions, service principals, and trust boundaries
Define secure patterns for cloud-native and hybrid environments
Contribute to detection logic, correlation, and multi-signal reasoning
Distinguish noise from real risk to support autonomous decision-making
Design and assess secure network architectures including private networking, segmentation, and zero-trust principles
Evaluate exposure through public services, APIs, and infrastructure
Track attacker techniques, emerging threats, and exploitation patterns
Perform threat modeling and security analysis to improve product logic and coverage
CYBRET AI operates fully remote.
The team is currently based in Norway, but we hire internationally.
We recruit based on merit, excellence, and intelligence.
We value deep focus, curiosity, and strong ownership.
You are expected to work independently and make sound decisions in both low-effort, high-impact situations and high-effort, high-impact situations.
A strong shipping mindset is essential. Security work at CYBRET AI must lead to real product improvements, not just analysis.
Interest in security research and state-of-the-art techniques is strongly preferred.
Writing technical blogs or research content is optional but highly valued.
This is an early-stage startup. The pace is high, structure evolves continuously, and impact is real.
Monthly social gatherings such as weekend trips, cabin stays, and team events are covered by CYBRET AI
Dedicated budget for learning, courses, and professional development
Small, highly skilled, talent-dense team
Ambition to scale without sacrificing quality or depth
English is the primary working language
The company is Norwegian, with potential future transition to a US INC structure
Fully remote role with home office agreement
Laptop of your choice up to 20,000 NOK
Optional home office equipment
Mobile subscription and home internet fully reimbursed
Strict confidentiality and correct handling of sensitive information is mandatory
Ability to pass background checks and applicable security clearance is required
Standard insurance coverage is provided
CYBRET AI offers a highly competitive and generous Employee Stock Option Program.
Early hires are viewed as owners, not employees.
This role includes meaningful equity and long-term upside.
CYBRET AI is backed by leading Nordic and European investors.
Venture capital partners include Skyfall Ventures, Inception Fund, Visionaries Club, FR8 Ventures, and Wave Ventures.
Angel investors include leaders associated with Silo AI, WithSecure, HoxHunt, Google Cloud, and more.
Skills Required
- Design and analyze attack surfaces and real-world attack paths across cloud, identity, network, and application layers
- Experience designing and evaluating security controls across Azure, AWS, and GCP
- Deep knowledge of identity systems, permissions, service principals, and trust boundaries
- Experience in vulnerability and risk engineering, including risk scoring beyond CVSS
- Detection engineering experience: detection logic, correlation, and multi-signal reasoning
- Design and assess network architectures and Zero Trust principles
- Threat modeling and tracking attacker techniques to inform product logic
- Ability to pass background checks and applicable security clearance
- Strong ownership, independent work capability, and a shipping mindset
- Interest in security research and state-of-the-art techniques; writing technical content
- Fluency in English (primary working language)
What We Do
Cybret AI is an autonomous security research and development lab building intelligent systems that understand, reason about, and respond to real-world cyber threats at machine speed. The company aims to redefine Managed Detection and Response (MDR) by creating context-aware AI systems for autonomous cybersecurity operations.
