Application Security Researcher

Who are we? With $36M in seed funding and customers from Fortune 500 companies such as Costco and Repsol, Orchid Security is already on an exciting journey to deliver the next infrastructure layer in the security space. Behind our platform are advanced technologies, including Large Language Models (LLMs), enabling Orchid to provide unprecedented insight and action for enterprise identity security. Core mission In this role, you’ll analyze real-world environments, identify potential attack vectors, and work along our AI engineering team to translate your domain expertise into actionable, defined workflows. You’ll play a key role in guiding how our product analyzes and surfaces findings across fortune 500 enterprises. What will you do? Analyze large-scale data to identify attack opportunities and improve detection accuracy of identity-related security risks Encode security expertise into AI-driven analysis - translating your understanding of how applications manage access into prompts, decision logic, and agentic workflows that power Orchid's AI analysis engine Propose how AI agents detect and reason about real-world identity attack scenarios - including authentication bypasses, privilege escalation paths, and cross-system credential exposure, by collaborate with our AI engineering team to bring ideas from concept to shipped product Conduct research on chaining vulnerabilities, logic flaws, and complex attack paths and actively contribute to research direction, ideation, and innovation within the team Collaborate with product and engineering, ensuring AI-driven identity decisions stay grounded in how applications actually work in the wild Participate in customer engagements across the full lifecycle, from POC to onboarding, delivering findings and presenting identity risk insights to technical and business stakeholders