Security Researcher - Rippling

At Netwrix, our mission is to revolutionize data security by placing identity at the core - providing unparalleled visibility and control. Engineered and supported by over 900 highly talented, motivated employees and hundreds of trusted partners in nearly every geography, Netwrix solutions are relied upon daily by security professionals across more than 13,500 organizations in over 100 countries around the world.

Over the past two decades, Netwrix has expanded its market presence through innovation, organic growth, and strategic acquisitions, and are proud to be backed by renowned private equity firms, TA Associates and Centerbridge Partners. Netwrix maintains a global presence, fostering a remote-first work environment while encouraging and facilitating frequent face-to-face interaction with colleagues, customers, and partners.

Position Overview

Netwrix is seeking a Security Researcher with expertise in Active Directory and Entra ID to join our security research team. This role focuses on hands-on research into Active Directory and Entra ID security: finding misconfigurations, privilege escalation paths, and attack techniques. You'll build and validate proof-of-concepts, work closely with product teams, and grow your research and public speaking profile as part of the team.

Key Responsibilities

• Conduct hands-on research into Active Directory, Windows and Entra ID, identifying misconfigurations, privilege escalation paths, and attack techniques.
• Build proof-of-concept exploits and testing methodologies to validate research findings. Using AI tools to speed up research and prototyping (vibe coding a POC, automating repetitive analysis, etc.) is welcome and encouraged.
• Work with engineering and product teams to help translate research into product improvements.
• Contribute to the Netwrix Blog and Attack Catalog with technical write ups of findings.
• Contribute to our open source GitHub repository, including tools such as the free version of PingCastle.
• Opportunity to co present or present research at industry conferences (BlackHat, Defcon, RSA, etc.) as your experience grows.

Required Qualifications

• 1 to 3 years of hands on experience in security research, red teaming, penetration testing, or a closely related identity security role, with a focus on Active Directory, Entra ID, Windows, or related identity platforms.
• Working knowledge of common AD/Entra ID misconfigurations, privilege escalation paths, and attack techniques, or a strong foundation and a track record of picking these up fast.
• Strong problem solving skills, with the ability to take an unfamiliar system or attack surface and break it down into testable hypotheses.
• Comfortable using AI tools to speed up research work, whether that's automating repetitive analysis, scripting tooling, or quickly putting together a proof of concept.