Security Advocate

Nightfall AI; United States; Hybrid; USD 150,000 - 230,000; Full time

Benefits offered by this job

Competitive pay, equity, and 401k plan

Regular, thoughtful compensation tests

Support for professional development

Flexible time off

Company wide holidays

Flexible commuter options

Generous parental leave policy

Comprehensive health, vision, dental

Reimbursement for home office, fitness

Mental wellness expenses

Job summary

Nightfall AI is seeking a hands-on security research professional who will act as the DevRel for security operations and data security. You will test AI models and tools, find data exposures, and demonstrate findings to SOC, IR and data security teams.

You will present on camera, write analyses, build open-source tools, and contribute to demonstrations for customers. You will own end-to-end investigations, publish technical content, give talks at conferences, and help shape products with

Qualifications

• 5+ years in security engineering, detection engineering, incident response, insider risk/DLP, security research or sales engineering.
• Ability to explain technical findings clearly and defend them under questioning.
• Understanding how enterprise data moves across SaaS, endpoints and AI tools and how security controls like DLP, CASB, SIEM and EDR work.

Responsibilities

• Own end-to-end technical investigations and become a trusted public voice for SOC, IR and data security practitioners.
• Run The Model Did What? investigations—test models, agents and AI tools against enterprise workflows; expose data exposures.
• Create detections, scanners, labs and utilities; document and maintain them after launch.
• Speak and teach at security conferences and run hands-on workshops to reproduce problems and test defenses.
• Build the community through talks, podcasts, livestreams and practitioner networks.
• Equip sales engineers with realistic, resettable demo environments and synthetic data.

Skills

Security engineering

Detection engineering

Incident response

Insider risk

DLP

Security research

Sales engineering

Public speaking

Job description

• A hands-on security research role with a public voice: the DevRel function for security operations and data security
• AI models and agents give software new ways to access and move company data
• We want someone who will test what that makes possible, find where data actually leaks, and show security teams what they found
• You might be a detection engineer, incident responder or insider-risk engineer who enjoys explaining your work
• Or a security advocate, researcher or SE who wants more time to build
• At Nightfall, you’ll own technical investigations end to end and become a trusted public voice for the company with SOC, IR and data security practitioners
• Run “The Model Did What?” investigations. Test new models, agents and AI tools against realistic enterprise workflows. Find concrete data exposures, build working reproductions, and show where security controls hold or fail
• Explain it on camera and in writing. Open your laptop and walk through what happened. Turn findings into technical videos, blog posts and demos that SOC and data security teams want to watch and share, working with our content team
• Build open-source tools. Ship detections, scanners, labs and utilities that practitioners actually use. Document them, respond to issues, and maintain them after launch
• Speak and teach. Give talks at security and engineering conferences (BSides, Black Hat, DEF CON villages and similar). Run hands‑on workshops where participants reproduce the problem and test a defense themselves
• Build the community. Host or join podcasts, livestreams and practitioner communities. Bring what you hear from security teams back to product and marketing
• Equip our sales engineers. Create realistic, resettable demo environments with synthetic data, plus the scenarios and documentation SEs need to run them on their own

Benefits

• Competitive pay, equity, and 401k plan
• Regular, thoughtful compensation reviews
• Support for professional development
• Flexible time off
• Company wide holidays
• Flexible commuter options
• Generous parental leave policy
• Comprehensive health, vision, dental benefits
• Reimbursement for home office, fitness, and mental wellness expenses

An established public voice in security: talks, a podcast, research write-ups, open-source projects or a following practitioners trustPublic work can be a small tool, a strong write-up or a clear demo. We care about the quality of your thinking and what you built, not the title you heldYou can code, work with APIs and debug across unfamiliar systemsYou enjoy talking with security practitioners and engineers, on camera and in person5+ years in security engineering, detection engineering, incident response, insider risk/DLP, security research or sales engineeringYou can explain a technical finding clearly and defend it under questioningYou understand how enterprise data moves across SaaS, endpoints and AI tools, and how security controls like DLP, CASB, SIEM and EDR workYou follow through on the software and content you publishExperience as a security advocate, evangelist or DevRel at a security vendor; hands‑on work with LLMs, AI agents or MCP; SOC or data security operations experience