Security Research Team Lead

Location:

Scope:

About the Role

About Reco

At Reco.ai, we redefine SaaS & AI security. Our AI-driven security platform helps organizations discover, analyze, and secure their SaaS applications and identities. As SaaS and AI adoption grows, so do security risks and our mission is to help businesses answer one critical question: "Is my SaaS environment truly secure?"

We're looking for a Security Research Team Leader to lead our research efforts, uncover emerging SaaS & AI threats, and drive the development of advanced detection logic for SaaS attacks, insider threats, and misconfigurations.

Responsibilities

Lead a team of senior Security Researchers and Threat Detection Engineers.
Drive proactive threat hunting to identify emerging attack techniques across SaaS environments.
Research new threats, investigate complex SaaS & AI security incidents, and improve detection capabilities.
Design and optimize detection logic while reducing false positives.
Stay current with the latest cybersecurity trends and attack techniques.
Partner with customers during security investigations and incidents.
Represent Reco through technical content, webinars, and industry conferences.

Requirements

2+ years of experience leading security research teams.
7+ years in cybersecurity (SaaS Security, SOC, SIEM, Threat Intelligence, or Cloud Security).
Experience with SaaS security challenges (OAuth, Shadow IT, IDP misconfigurations, excessive permissions).
Hands-on experience in Threat Hunting, detection engineering, or security research.
Strong understanding of identity-based attacks, insider threats, and SOC detection methodologies.
Proficiency in SQL and experience working with large-scale security data.
Familiarity with SIEM/XDR platforms (Splunk, Sentinel, Chronicle, etc.).
Strong analytical and problem-solving skills.
Fluent English (written and spoken).

Thank you! Your submission has been received!

Oops! Something went wrong while submitting the form.

Security Research Team Lead

Your agents are already running. Do you know what they're doing?