Remote Security Researcher for AI & Workplace Threats

Weve Security Limited; Union (NJ); Remote; USD 120,000 - 160,000; Full time

Job summary

Weve is building workplace security for a world where people and AI agents work across dozens of systems. You will join a team researching misuse of legitimate access and unusual activity to design precise detections and investigations.

You’ll partner with engineering to define observable behavior, collect data requirements and establish how a detection is useful, scalable and auditable. Remote work is supported.

Qualifications

• Hands-on experience in detection engineering, incident response or threat research.
• Ability to reconstruct activity from audit logs and explain what logs establish or do not establish.
• Practical scripting and data-analysis skills to test hypotheses and create repeatable research.
• Good judgement about evidence, privacy and authorisation when investigating activity.
• Clear writing: explain a detection’s assumptions, failure modes and validation approach.

Responsibilities

• Research misuse of legitimate access, risky sharing, unusual agent activity and related workplace threats using authorised environments and evidence.
• Specify the signals, relationships, history and peer context needed to distinguish a credible risk from normal work.
• Develop investigation approaches that seek supporting evidence and benign explanations with clear limits on conclusions.
• Build representative evaluation cases, including near misses and legitimate behaviour that resembles an attack.
• Work with applied AI and engineering to turn research into detections, investigation tools and measurable evaluation criteria.
• Review customer findings with field engineering to improve the system.

Skills

Detection engineering

Incident response

Threat research

Scripting

Data analysis

Written communication

Tools

Python

SQL

Job description

Weve is building workplace security for a world where people and AI agents work across dozens of systems. You will join a team researching misuse of legitimate access and unusual activity to design precise detections and investigations.

You’ll partner with engineering to define observable behavior, collect data requirements and establish how a detection is useful, scalable and auditable. Remote work is supported.