Security Researcher

November 26

Apply Now

Receive Emails with Similar Jobs

Tenchi Security

WebsiteLinkedInAll Job Openings

Cybersecurity • Compliance • Enterprise

Tenchi Security is a cybersecurity company that specializes in third-party cyber risk management. Their unique solution, Zanshin, systematically reduces third and nth-party cyber risks by enhancing security postures through continuous monitoring and proactive remediation efforts. Recognized as a LinkedIn Top Startup in 2024, Tenchi Security focuses on building not just compliance but meaningful partnerships in cybersecurity, enabling both enterprises and their third-party vendors to collaboratively manage and mitigate risks.

51 - 200 employees

Founded 2019

🔒 Cybersecurity

📋 Compliance

🏢 Enterprise

💰 $3.3M Seed Round on 2021-10

📋 Description

• Security Research: Analyze emerging threats, vulnerabilities, attack techniques, and defensive strategies across various domains (e.g., cloud security, application security, network security, IoT security). Identify potential vulnerabilities and misconfigurations. • Content Engineering and Technical Documentation: Leverage your research into actionable detection rules with detailed mitigation steps to help customers. • Knowledge Sharing: Present research findings internally and externally (e.g., conferences, whitepapers, blog posts) to establish thought leadership and contribute to the broader security community. • Compliance & Regulations: Stay up-to-date on relevant security compliance frameworks (e.g., NIST, ISO 27001, SOC 2, GDPR) and integrate compliance considerations into research initiatives and product recommendations. • Product Development: Collaborate cross-functionally with engineering, product management, data science and consulting teams to translate research findings into actionable product features and security solutions. • Innovation: Drive continuous improvement in research methodologies, tools, and processes. Identify opportunities for automation and efficiency.

🎯 Requirements

• Bachelor's or Master's degree in Computer Science, Cybersecurity, Information Security, Networking or a related technical field. • 3+ years of experience in cyber security, with a strong focus on offensive and/or defensive security. • Deep understanding of the cyber security landscape, including common attack vectors, threat intelligence concepts and techniques, and defensive strategies. • Strong knowledge of security compliance frameworks and regulations (e.g., NIST, ISO 27001, GDPR). • Solid technical background in the following areas: • - Computer Science fundamentals: Operating systems, data structures, algorithms, system architecture, etc. • - Networking: TCP/IP, network protocols, HTTP/HTTPS, network security architectures, intrusion detection/prevention, etc. • - Cloud Security: AWS, Azure, GCP security services, cloud native architectures., etc.** • Excellent communication, presentation, and interpersonal skills, with the ability to articulate complex technical concepts to both technical and non-technical audiences. • Strong analytical and problem-solving skills, with a methodical approach to security challenges. • **Great if you have:** • - Experience with scripting and programming languages (e.g., Python, Javascript). • - Active participation in the security community (e.g., conference speaking, open-source contributions, security blogs). • - Strong industry certifications such as OSCP, CISSP, eJPT, etc. • - Vendor-specific security certifications such as AWS Certified Security, Azure Security Engineer, GCP Cloud Security Engineer, etc.