---
title: 'Associate Principal Engineer - Threat Researcher at Saviynt'
canonical: 'https://feeny.ai/job/associate-principal-engineer-threat-researcher-saviynt-bengaluru-3gtsvrd7dhmt'
type: 'job'
last_seen: '2026-10-12'
---

# Associate Principal Engineer - Threat Researcher at Saviynt

- **Company:** Saviynt
- **Location:** Bengaluru, India
- **Employment:** full-time
- **Work type:** hybrid
- **Posted:** 2026-09-29
- **Last confirmed live:** 2026-10-12
- **Apply:** https://jobs.lever.co/saviynt/018b51fc-87e6-42c9-aa92-9303c9397835

## Job description

Saviynt's AI-powered identity platform manages and governs human and non-human access to all of an organization's applications, data, and business processes. Customers trust Saviynt to safeguard their digital assets, drive operational efficiency, and reduce compliance costs. Built for the AI age, Saviynt is today helping organizations safely accelerate their deployment and usage of AI. Saviynt is recognized as the leader in identity security, with solutions that protect and empower the world’s leading brands, Fortune 500 companies and government institutions. For more information, please visit www.saviynt.com.

What will you be doing?

- Spearhead Identity Threat Research: Lead advanced research initiatives focused on uncovering and understanding novel identity-centric vulnerabilities (Human Identity(HI), Non Human Identity(NHI), Agentic Identity) based attack vectors, and exploit chains across hybrid and multi-cloud environments.
- Data-Driven Behavioral Modeling: Leverage vast telemetry from multi-cloud environments, disparate data sources, and user activity logs to conduct deep behavioral analysis. You will be a domain expert and work with an extended team to develop and refine sophisticated behavioral models to detect anomalies, uncovering stealthy, suspicious identity threat patterns that bypass traditional signature-based detection.
- Drive Product Innovation: Partner closely with Product Managers and Engineering teams to translate complex threat research into actionable product features, robust detection algorithms, and high-fidelity telemetry for our next-generation ITDR platform.
- Execute Advanced Threat Hunting & Intelligence: Conduct proactive threat intelligence gathering and sophisticated threat hunting specifically targeting Identity vulnerabilities (e.g., Active Directory, Entra ID, Okta, PAM, and Cloud IAM misconfigurations).
- Operationalize Security Frameworks: Extensively utilize and map research to industry-standard frameworks, including MITRE ATT&CK, MITRE ATLAS, and MAESTRO, ensuring our detection strategies comprehensively cover modern adversary Tactics, Techniques, and Procedures (TTPs).
- Pioneer Detection Engineering: Architect and develop advanced detection strategies, behavioral baselines, and correlation rules to identify anomalous identity behaviors, privilege escalation, and lateral movement.
- Establish Thought Leadership: Serve as a highly visible ambassador for Saviynt’s research capabilities. You will regularly author and publish high-quality blogs, and technical reports on emerging threats.
- Drive Patentable Innovation: Foster a culture of exemplary, bleeding-edge innovation within the team, actively pursuing research that leads to industry publications, CVE discoveries, and patents for Saviynt.
- Mentor and Guide: Act as a senior technical authority, mentoring junior researchers and elevating the overall technical acumen of the Threat Research and Engineering organizations.

What you will bring?

- Extensive Industry Experience: 12+ years of progressive experience in cybersecurity, with a minimum of 5+ years dedicated specifically to Threat Research, Threat Intelligence, or advanced Detection Engineering at a senior/lead level.
- Technical & Analytical Skills:

-

- Threat Intelligence Pivoting: Tracing connections between seemingly unrelated data points (e.g., IPs, domain names, hashes) to attribute attacks to specific threat actors or Advanced Persistent Threats (APTs).
- Security Frameworks: Applying industry models to classify and map adversary behavior, such as the MITRE ATT&CK framework, ATLAS, and MAESTRO.
- Attack Vectors: Knowledge of Identity based attacks such as Pass-the-Hash/Ticket, Golden/Silver Tickets, MFA Fatigue (Prompt Bombing), Token Theft, Kerberosting and Credential Stuffing.
- Adversary Tradecraft: Familiarity with tools threat actors use to map and exploit identity environments, such as Mimikatz, BloodHound, Rubeus
- Vulnerability & Exploit Research: Assessing zero-day flaws, evaluating proof-of-concept (PoC) exploits, and testing patching strategies.
- Programming & Scripting: Familiarity with scripting and programming languages (e.g., Python, Go, Bash) to help rapidly engineer complex detection algorithms and prototype innovative feature proof-of-concepts (POCs).
- Data Mining & OSINT: Gathering threat intelligence from various sources like Open Source Intelligence (OSINT), dark web forums, threat feeds, and internal telemetry.
- Rule/Signature Development: Creating custom detection logic for monitoring platforms (e.g., building YARA or Snort rules), experience writing detection logic using SIEM query languages (Splunk SPL, KQL) or universal formats like Sigma.
- AI/ML in Threat Research: Working knowledge of leveraging Artificial Intelligence and Machine Learning technologies to aid in threat research, scale threat hunting capabilities, or improve the fidelity of detection mechanisms, Agentic AI usage and understanding of the upcoming Agentic AI threats.
- A Portfolio of Excellence: A demonstrated track record of thought leadership, including published white papers, popular cybersecurity blogs, conference speaking engagements, patents, or acknowledged CVEs.
- Cross-Functional Leadership Skills: Exceptional communication skills with the proven ability to distill complex, highly technical research into clear, actionable requirements for Product Management and Engineering teams.
- Algorithmic Prototyping: Good-to-have skills in developing and prototyping complex detection algorithms, familiarity with advanced query languages used in data analysis.
- Identity Security Expertise: Understanding of Identity and Access Management (IAM), Privileged Access Management (PAM), and cloud identity architectures (AWS IAM, Azure AD/Entra ID, GCP Cloud Identity, Active Directory). Understanding how identity works in AWS (IAM Roles, Policies), GCP (Cloud Identity), and Azure
- Logistical Flexibility:

-

- Willing to work in a Hybrid model from our Bengaluru office.
- Willingness to undertake some travel globally based on business requirements, industry conferences, and strategic team syncs.

Saviynt is an amazing place to work. We are a high-growth, Platform as a Service company focused on Identity Authority to power and protect the world at work. You will experience tremendous growth and learning opportunities through challenging yet rewarding work which directly impacts our customers, all within a welcoming and positive work environment. If you're resilient and enjoy working in a dynamic environment you belong with us! Security & ComplianceThis role requires adherence to Saviynt’s information security and privacy policies and procedures, including annual security training.

Saviynt is an equal opportunity employer and we welcome everyone to our team.  All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or veteran status.

## About Saviynt

## Company Overview
- **One-liner**: Saviynt provides an AI-powered identity security and access management platform that secures and governs every identity—human, non-human, and AI agent—across the entire digital ecosystem.
- **Entity Type**: Private (Series B)
- **Headquarters**: El Segundo, California, United States
- **Founded**: 2010
- **Founders**: Not publicly available

## Core Business
- **Primary Industry**: Identity Security & Access Management (IAM/IGA) / Cybersecurity
- **Target Customers**: Large enterprises, Fortune 500 companies, government institutions (B2B, Enterprise)
- **Mission or Purpose**: To safeguard enterprises through intelligent, cloud-first identity governance and access management solutions, helping organizations safely accelerate AI deployment while protecting digital assets and driving operational efficiency.

## Products & Services
- **Saviynt Identity Cloud (Platform)**: An AI-powered platform that manages and governs human, non-human, and AI agent access to applications, data, and business processes across hybrid, cloud, and on-premises environments. It combines Identity Governance and Administration (IGA), Privileged Access Management (PAM), and Application Access Governance (AAG) into a single platform. **Type**: SaaS Platform.

## Market Standing
- **Valuation**: Not disclosed (privately held)
- **Key Metric**: Total Funding of $1.075 billion across multiple rounds. Annual Revenue is $89.3 million.
- **Notable Investors/Partners**: Kohlberg Kravis Roberts & Co. (lead, Series B), HPS Investment Partners, PNC Bank, Carrick Capital Partners. The company serves Fortune 500 companies and government institutions.
- **Growth Signals**: 1,260 employees (+28.0% YoY), 358,442 LinkedIn followers (+86.7% YoY), active job postings up +51.0% year-over-year, global expansion with offices in the US, UK, Australia, Canada, and India.

## Competitive Advantages
- **Unified Platform**: Combines IGA, PAM, and AAG into a single cloud-native platform, reducing complexity and cost for enterprises compared to multi-vendor solutions.
- **AI-Native Architecture**: Built for the AI age, it specifically addresses identity security for AI agents and non-human identities, a rapidly growing market need.
- **Enterprise Scale & Trust**: Designed for the largest, most complex organizations (Fortune 500, government) with a focus on compliance, security, and operational efficiency.
- **Strong Financial Backing**: $1.075 billion in total funding provides significant resources for R&D and market expansion.

## Strategic Focus
- **AI-Driven Identity Security**: Prioritizing the safe acceleration of AI deployment and usage by securing AI agent identities.
- **Global Expansion**: Deepening presence in key markets like India, the UK, Australia, and across Europe.
- **Platform Growth**: Continuing to unify and enhance the Identity Cloud platform to cover the full spectrum of identity challenges.
- **Talent Acquisition**: Aggressively hiring (+51% job postings YoY) to scale engineering, sales, and customer success teams.

## Why Work Here
- **High-Growth Environment**: Headcount grew 28% in the last year, offering strong career advancement potential in a fast-scaling company.
- **Mission-Driven Work**: Tackling critical cybersecurity challenges for the world’s largest organizations.
- **Global & Remote-First Culture**: Remote-friendly roles and hybrid options available, with offices in major cities globally (El Segundo, London, Sydney, Bengaluru). [saviynt.com](https://saviynt.com/careers)
- **Strong Compensation & Benefits**: Competitive base pay with bonuses, medical/dental/vision, retirement programs, and flexible time off. [saviynt.com](https://saviynt.com/careers)
- **Positive Employee Sentiment**: Average employer rating of **4.0/5.0** (436 reviews), with strong compensation (4.1) and career opportunity (4.0) scores. [linkedin.com](https://linkedin.com/company/saviynt)
- **Diverse, Global Team**: Workforce spans 23 countries, offering a rich, multicultural work experience.

## Sources
1. [LinkedIn Company Profile](https://linkedin.com/company/saviynt)
2. [Saviynt Careers Page](https://saviynt.com/careers)
3. [Saviynt About Us](https://saviynt.com/company/about-saviynt)
4. [Lever Job Postings](https://jobs.lever.co/saviynt)
5. [CB Insights Profile](https://www.cbinsights.com/company/saviynt)

## Other roles at Saviynt

- [Strategic Account Executive - Privileged Access Management (PAM)](https://feeny.ai/job/strategic-account-executive-privileged-access-management-pam-saviynt-california-11j3aggpfgdc) — California
- [Sr.Manager, Software Engineering](https://feeny.ai/job/sr-manager-software-engineering-saviynt-bengaluru-e6t18fmxr0eh) — Bengaluru, India
- [Senior Sales Development Representative](https://feeny.ai/job/senior-sales-development-representative-saviynt-delhi-mwsaf3r4fpqq) — Delhi, India
- [Named Enterprise Account Executive - Ohio](https://feeny.ai/job/named-enterprise-account-executive-ohio-saviynt-ohio-njec5b10tfhk) — Ohio
- [Sr. Benefits Specialist](https://feeny.ai/job/sr-benefits-specialist-saviynt-atlanta-zmkh7dq0s56y) — Atlanta, GA / El Segundo, CA / Milpitas, CA
- [Vice President  Field Sales - Public Sector](https://feeny.ai/job/vice-president-field-sales-public-sector-saviynt-washington-h9s5eha5tkds) — Washington, DC
- [Marketing Analytics & Data Visualization Architect (Remote, USA)](https://feeny.ai/job/marketing-analytics-data-visualization-architect-remote-usa-saviynt-united-xpt09m01j12s) — United States
- [Vice President, FP&A](https://feeny.ai/job/vice-president-fp-a-saviynt-united-states-93fyp98syy27) — United States
- [Global Controller](https://feeny.ai/job/global-controller-saviynt-united-states-33kvw02dgc1p) — United States
- [Junior Accountant - Accounts Receivable (AR)](https://feeny.ai/job/junior-accountant-accounts-receivable-ar-saviynt-bengaluru-dqx74jatqmkp) — Bengaluru, India