Cybersecurity Researcher

MWDN; Warszawa; On-site; PLN 120,000 - 160,000; Full time

Benefits offered by this job

People-first management

Free English classes

Flexible working hours

Dedicated HR support

Job summary

MWDN is seeking a candidate proficient in security research, especially within browser and mobile environments. This role focuses on identifying new security signals and investigating techniques used by malicious actors. You'll work closely with stakeholders to translate research findings into actionable SDK features.

The ideal applicant should have more than 3 years of hands-on experience in relevant areas and possess a Bachelor's degree in Computer Science or related fields. MWDN offers a friendly company culture, flexible working hours, and additional benefits.

Qualifications

• 3+ years of hands-on experience in relevant technical roles.
• Ability to identify subtle technical signals for detection.
• Experience with one or more SDK development languages.

Responsibilities

• Research browser and mobile environments from an attacker’s perspective.
• Identify new security signals and technical patterns.
• Investigate attacker techniques involving automation and spoofing.
• Design and run experiments to compare manipulated environments.
• Translate research findings into SDK feature requirements.

Skills

Security research

Mobile security

Web security

Reverse engineering

Browser technologies

Scripting in Python

SDK development

Education

Bachelor’s degree in Computer Science, Cybersecurity, or related field

Job description

Project Overview

• Domain: Identity and Access Management (IAM) software
• Location: Israel
• Company size: 200-500 employees
• Founded: 2014

Qualifications

• 3+ years of hands‑on experience in security research, mobile security, browser research, fraud research, detection research, reverse engineering, or a related technical role.
• Experience with web browsers, mobile browsers, WebViews, browser APIs, JavaScript runtime behavior, browser automation, fingerprinting, client‑side web security, and low‑level browser technologies.
• Familiarity with the architecture or codebase of modern open‑source browsers and rendering engines, such as Chromium, WebKit, Blink, or Gecko, with the ability to reason about how browser internals can expose new security and fraud signals.
• Experience with native Android and/or iOS applications, mobile OS behavior, app instrumentation, emulators, device spoofing, mobile automation, mobile security, and low‑level platform APIs.
• Attacker mindset and practical understanding of how malicious actors attempt to bypass detection using automation, AI agents, spoofing, and anti‑detection techniques.
• Ability to identify subtle technical signals and turn them into practical detection or data collection opportunities.
• Experience designing technical experiments and validating research hypotheses.
• Experience with one or more SDK development languages and environments, such as TypeScript/JavaScript for web, Kotlin/Java for Android, or Swift/Objective‑C for iOS, with the ability to understand implementation constraints and collaborate effectively with SDK engineering teams.
• Scripting ability, preferably in Python, for building research tools, automation, and analysis workflows.
• Ability to work independently on ambiguous problems and communicate findings clearly to engineering, product, and research stakeholders.

Additional Advantages

• Experience with Web SDKs, Mobile SDKs, client‑side telemetry, device intelligence, behavioral signals, AI agent detection, or fraud detection products.
• Experience researching bots, credential stuffing, scraping, headless browsers, AI‑assisted automation, app cloning, SDK abuse, phishing kits, malware, or anti‑detection frameworks.
• Experience with reverse engineering Android or iOS applications.
• Familiarity with detection quality measurement, feature evaluation, false‑positive analysis, production monitoring, or machine learning concepts.
• Bachelor’s degree in Computer Science, Cybersecurity, Data Science, or a related field— or equivalent hands‑on experience.

Responsibilities

• Research browser, WebView, Android, and iOS environments from an attacker’s perspective.
• Identify new security signals, behavioral indicators, and technical patterns that can improve fraud, abuse, automation, and AI agent detection.
• Investigate attacker techniques involving bots, browser automation, AI agents, emulators, device spoofing, hooking, instrumentation, remote access tools, and anti‑detection methods.
• Design and run experiments to compare legitimate, automated, AI‑assisted, and manipulated environments.
• Evaluate proposed signals for reliability, stability, spoofability, privacy sensitivity, performance impact, and production feasibility.
• Translate research findings into clear SDK feature requirements for web and mobile data collection.
• Build internal tools, scripts, and lab environments to support signal research and validation.
• Collaborate with SDK, engineering, product, and detection teams to move research from hypothesis to production.

Benefits

• People‑first management with minimal bureaucracy.
• A friendly company culture.
• Flexible working hours.
• Full financial and legal support for independent contractors.
• Free English classes with native speakers or Ukrainian teachers.
• Dedicated HR support.