Security Researcher

Investigate typosquatting, phishing infrastructure, and brand abuse at scale, turning noisy signals into actionable intelligence for customers.

Apply nowAll open roles

About the role

Have I Been Squatted helps security teams find and stop malicious domains before they become incidents. As a Security Researcher, you will deepen our understanding of attacker tactics, improve detection quality, and help customers prioritize what matters.

You will work closely with engineering and product to validate hypotheses, design research workflows, and communicate findings clearly, both internally and, where appropriate, to the broader security community.

  • Type

    Remote

  • Region

    EU + UK

  • Timezone

    UTC to UTC+1

Remote from Poland, Kosovo, Romania, Austria, Czechia, Croatia, Bulgaria, Italy, United Kingdom or other UTC-adjacent locations

What we offer

  • Remote-first role with overlap-friendly hours across UTC-adjacent time zones
  • Small, senior team with direct impact on product direction and customer outcomes
  • Modern stack and room to propose better ways to research and ship
  • Competitive compensation and equipment budget appropriate to the role

Nice to have

  • Experience with certificate transparency, passive DNS, or threat intel feeds
  • Familiarity with Rust, SQL, or data analysis notebooks for ad-hoc research
  • Prior work in a product-led security or SaaS environment

What you will do

  • 00Analyze domain leveraging hundreds of data signals to identify abuse patterns and high-risk registrations
  • 01Build and refine research notes, playbooks, and lightweight tooling to speed up repeatable investigations
  • 02Partner with engineering to improve detection logic, data coverage, and analyst-facing workflows
  • 03Support customer-facing teams with technical context for complex cases and escalations
  • 04Contribute to responsible disclosure practices and clear documentation of research outcomes

What we're looking for

  • 00Hands-on experience investigating phishing, brand impersonation, or domain abuse
  • 01Comfort working with structured data, logs, and open-source intelligence (OSINT) sources
  • 02Strong written communication: you can explain trade-offs and uncertainty without hype
  • 03A collaborative mindset; you are happy to iterate quickly and learn from production feedback

Interested in this role?

Send a short introduction, your resume, and a link that showcases your work. We reply when there's a fit.

Get in touchAll open roles