Senior CyberSecurity Researcher, Paris

Responsibilities

• ▹Investigates novel and existing tactics to find and abuse exposed credentials on a day-to-day basis, then publishes findings as authoritative research
• ▹Analyzes ongoing threats and attacks, explores new exploitation techniques, and documents emerging tactics
• ▹Collaborates with engineering teams to improve secret validation and coverage
• ▹Tracks offensive trends and techniques, producing 2-3 technical deep-dive articles or talks per quarter with the marketing team
• ▹Spends roughly 70% of time on research and 30% on producing content for the security community

Requirements

• ▹5+ years of experience in a security engineer role, with 2+ years dedicated to research-related work, or equivalent
• ▹Strong offensive security background (pentesting, vulnerability research, or red team experience), able to think like an attacker and translate that into defensive insights
• ▹Experience with reverse engineering (binary analysis, malware inspection, malicious packages) and API/web security (OAuth, JWT, token validation, secret exposure patterns)
• ▹Comfortable working with modern infrastructure such as cloud platforms (AWS, GCP, Azure) or AI/LLM ecosystems, able to assess their security implications
• ▹Actively leverages AI tools in day-to-day research, whether for automation, analysis, or accelerating prototyping

About the company

GitGuardian is a global cybersecurity scale-up headquartered in Paris, with additional offices in New York City and Boston. Early investors include GitHub co-founder Scott Chacon and Docker co-founder Solomon Hykes, and the company raised a Series C round from leading US and European VC firms in early 2026. The GitGuardian platform is used by more than 600,000 developers worldwide and by 50 of the Fortune 500.