---
title: 'Security Research Engineer, Attack Surface & Risk Signals at CyberCube'
canonical: 'https://feeny.ai/job/security-research-engineer-attack-surface-risk-signals-cybercube-san-francisco-0tr40ch7w0rz'
type: 'job'
last_seen: '2026-10-14'
---

# Security Research Engineer, Attack Surface & Risk Signals at CyberCube

- **Company:** CyberCube
- **Location:** San Francisco, CA
- **Compensation:** $140k–$160k
- **Employment:** full-time
- **Work type:** hybrid
- **Posted:** 2026-10-12
- **Last confirmed live:** 2026-10-14
- **Apply:** https://jobs.ashbyhq.com/cybcube/e5bab087-fadf-4a66-8156-a0d6ab418bfa

## Job description

[About CyberCube:](https://www.cybcube.com/careers) CyberCube delivers the world's leading analytics to quantify digital risk, helping the largest global carriers, reinsurers and brokers understand, price and manage cyber risk in financial terms.

- AI at our foundation, cyber risk at our core. We don't just use AI, we shape it.
- Built on AI from day one. Artificial intelligence has been part of our strategy since the beginning, blended with deep cybersecurity and insurance expertise and backed by rigorous testing.
- Trusted by more than 100 clients, including 75% of the top 40 European and US cyber insurance carriers and 70% of the top ten reinsurance brokers.
- Backed for global growth. In 2025 Spectrum Equity joined some of CyberCube’s financial partners as a new cornerstone investor, accelerating our global growth and fueling innovation across our end-to-end cyber risk analytics for the insurance industry.
- A truly global team across San Francisco, New York, London, and Tallinn.
- A culture of collaboration, openness, intellectual rigor, and ownership for excellence.
- People at the forefront. We encourage CyberCubers to challenge themselves, push boundaries, and do the best work of their careers.

Quantitative Cyber Risk Engineer

About the Role Are you fascinated by the underlying architecture of the internet? Do you look at complex network configurations and immediately see the quantitative risk exposure? As a Quantitative Cyber Risk Engineer, you will play a critical role at the intersection of network engineering, cybersecurity, and data science. We are looking for an expert who deeply understands how the internet is wired—down to the protocol level—and possesses the quantitative prowess to translate that knowledge into computable risk metrics. In this role, you will analyze how global businesses configure their internet-facing assets and design mathematical signals that accurately quantify their exposure to cyber attacks. Working alongside Data Scientists, Engineers, and Product teams, your research and models will directly drive the next generation of risk-scoring and analytical engines for the cyber insurance industry. If you are passionate about turning theoretical network vulnerabilities into actionable, real-world risk signals that influence a global industry, this is the role for you.

## Key Responsibilities

- Design Risk Signals: Develop innovative, quantitative signals that accurately measure a company’s exposure to cyber attacks based on their network architecture, asset configurations, and internet footprint.
- Quantify the Unquantifiable: Translate theoretical cybersecurity concepts and complex network topologies into empirical, actionable risk metrics and assumptions.
- Architectural Deep-Dives: Evaluate and extract meaningful insights from how organizations deploy and configure internet-facing protocols, cloud infrastructure, and enterprise networks.
- Threat Landscape Research: Conduct in-depth research on emerging cyber threats (e.g., critical vulnerabilities, ransomware, trending exploits, data breach techniques) and map them to underlying asset configurations.
- Cross-Functional Collaboration: Serve as the subject matter expert on internet architecture, working closely with product, analytics, and engineering teams to integrate your risk signals into production models.

Must-Have Skills & Qualifications

- Deep Internet & Networking Expertise: Expert-level understanding of how the internet works at a foundational level. You should be intimately familiar with network protocols (TCP/IP, BGP, DNS, HTTP/S, TLS), routing, ASN ecosystems, and complex enterprise network configurations.
- Strong Quantitative Acumen: Proven ability to apply mathematical and statistical concepts to real-world problems. You must be able to design quantitative metrics and build logic that scores and sizes risk exposure accurately.
- Analytical Mindset: Exceptional problem-solving skills with a track record of conceptualizing complex, abstract security concepts and breaking them down into measurable data points.
- Educational Background: Bachelor’s or Master’s degree in Computer Science, Computer Engineering, Mathematics, Statistics, or a related highly quantitative/technical field.
- Experience: 3–5+ years of relevant work experience in network engineering, cyber threat research, risk modeling, or a related domain.

Good-to-Have (Preferred) Skills

- Coding for Signal Creation: Proficiency in Python or R to prototype algorithms and turn your theoretical risk concepts into actual programmatic outputs.
- Data Querying: Experience with SQL and relational databases to pull, manipulate, and analyze large datasets of asset and configuration data.
- Big Data Exposure: Familiarity with big data frameworks (Spark / Hadoop), flat files, complex data types (JSON, XML), and working with APIs.
- Industry Context: Experience working in or adjacent to the cyber insurance, risk modeling, or data science industries.
- Certifications: Advanced technical or security certifications (e.g., CISSP, CISM, or advanced Cisco/networking certifications) are a plus, but hands-on expertise matters most.

Who might thrive here This role is a fit for people from many backgrounds. You might be a Security Researcher, Threat Researcher, Penetration Tester or Offensive Security Engineer who knows how attackers find and exploit exposed assets. Or you might come from network engineering, detection engineering, or attack surface management and know exactly how internet-facing infrastructure gets set up and misconfigured. If you've done bug bounty or red team work, or built security data and risk models, and you want to turn that experience into signals that shape a global industry, we'd love to hear from you.

AI Fluency at CyberCube AI is reshaping how work gets done across every function. We value people who are curious about AI, eager to learn, and thoughtful about applying AI tools to work more effectively. AI fluency is part of how we assess every role in our hiring process.

Don't tick every box? Apply anyway. Research shows the best candidates rarely match a job description point for point. If you're excited about this role and believe you could make an impact, we'd love to hear from you, even if your experience doesn't line up perfectly with everything listed above.

CyberCube Analytics, Inc. and CyberCube Analytics Europe Limited is an equal opportunity employer. We don’t tolerate discrimination against age, gender, gender identity, gender expression, sexual orientation, race, color, nationality, ethnicity, religion, disability, veteran status, protected genetic information or political affiliation.

## About CyberCube

## Company Overview
- **One-liner**: CyberCube delivers world-leading cyber risk analytics and modeling SaaS solutions to help the insurance ecosystem quantify, underwrite, and manage cyber risk.
- **Entity Type**: Private – VC‑backed with multiple funding rounds (Series A, Series B, and a $180M+ investment in 2025 from Spectrum Equity)
- **Headquarters**: San Francisco, California, USA (additional offices in Chicago, New York, London, and Tallinn)
- **Founded**: 2018 (spun out from Symantec)
- **Founders**: Pascal Millaire (former General Manager of the Symantec division) and Ashwin Kashyap (Co‑Founder & CPO); the company launched as a standalone VC‑backed entity in 2018.

## Core Business
- **Primary industry**: Cyber risk quantification and analytics for the insurance industry (includes insurers, reinsurers, brokers, MGAs, and insurance‑linked securities markets).
- **Target customers**: B2B – specifically (re)insurance carriers, brokers, reinsurance brokers, MGAs, regulators/rating agencies, and insurance‑linked securities investors.
- **Mission or purpose statement**: “Quantify the impact of catastrophic cyber events to make informed policy decisions … deliver world‑leading analytics to quantify cyber risk and improve the resilience of organizations and society.”

## Products & Services
- **Cyber Risk Analytics Platform (SaaS)**: A suite of cloud‑based applications that enable insurance placement, underwriting selection, portfolio management, and catastrophe modeling. Uses AI and vast data sets (over 1 billion technology dependencies) to model cyber risk in financial terms. Is transparent about data sources, methodologies, and model assumptions.
- **Scenario‑based Models**: Provides the “widest array of representative, explainable cyber scenarios” to help clients stress‑test portfolios and set risk tolerance thresholds.
- **Advisory & Support**: Dedicated support teams and consulting to help clients customise analytics and upskill underwriting teams.

## Market Standing
- **Valuation/Market Cap**: Not publicly disclosed; latest capital injection of $180M+ from Spectrum Equity in 2025.
- **Key Metric (Funding)**: Total funding includes Series A (led by Forgepoint Capital), Series B (led by Hudson Structured Capital Management along with MTech Capital and individuals from Stone Point Capital), additional growth capital from Morgan Stanley Tactical Value (2022), and the $180M+ investment from Spectrum Equity (2025).
- **Notable Investors/Partners**: Forgepoint Capital, Hudson Structured Capital Management, MTech Capital, Stone Point Capital, Morgan Stanley Tactical Value, and Spectrum Equity. Also a signatory to the UN Global Compact.
- **Growth Signals**: 
  - Used to model over 70% of global cyber premiums.
  - 75% of the top 40 European and US cyber insurance carriers utilize CyberCube analytics.
  - 70% of the top ten reinsurance brokers use CyberCube.
  - 50% of the top 20 reinsurance carriers analyze their portfolios with CyberCube.
  - Over 100 leading institutions as clients (as of 2023).
  - Office expansions into New York and Chicago (2022) and a recent cornerstone investment from Spectrum Equity (2025) to accelerate global growth.

## Competitive Advantages
- **Market‑leading penetration**: Already embedded in the infrastructure of the global cyber (re)insurance market.
- **Multidisciplinary team**: Combines expertise from cybersecurity, data science, actuarial science, software engineering, and insurance – a rare blend.
- **Transparency**: Open about data sources, models, and methodologies – builds trust with risk‑averse clients.
- **AI‑driven innovation**: Uses artificial intelligence as a core component to process vast data and deliver forward‑looking insights.
- **Scale of data**: Over 1 billion technology dependencies mapped to model cyber risk at a granular level.

## Strategic Focus
- **Global expansion**: Using the Spectrum Equity investment to accelerate international growth and fuel product innovation.
- **End‑to‑end analytics**: Moving beyond underwriting to cover the full risk lifecycle – portfolio management, capital modeling, and insurance‑linked securities.
- **ESG & sustainability**: Committed to the UN Global Compact and cross‑functional ESG initiatives, integrating responsible practices into operations.
- **Talent development**: Investing in employee learning and development budgets, volunteer days, and a supportive remote‑first culture.

## Why Work Here
- **Culture**: “Put people at the forefront” with a focus on wellbeing, personal development, trust, and openness. Core values include collaboration, intellectual rigor, and making an impact.
- **Work model**: Hybrid workspace with flexible remote policies – employees are expected to be on‑site periodically (typical time on‑site is flexible). Offices in San Francisco, Chicago, New York, London, and Tallinn.
- **Notable perks**: Learning & development budget, cement programs, volunteer days, and an inclusive environment that champions diversity. Recognized with awards for product innovation, culture, and employee satisfaction.
- **Engineering culture**: Multidisciplinary teams – data scientists, actuaries, software engineers, and cyber experts work closely. “The best of Silicon Valley meets the best of the insurance industry.”
- **Mission‑driven**: “Help society become more resilient to cyber risk” – employees feel their work has tangible societal impact.

## Sources
1. [cybcube.com - Home](https://www.cybcube.com/)
2. [cybcube.com - About Us](https://www.cybcube.com/about)
3. [cybcube.com - Careers](https://www.cybcube.com/careers)
4. [cybcube.com - Working for CyberCube video](https://www.cybcube.com/videos/working-for-cybercube)
5. [builtin.com - CyberCube profile](https://builtin.com/company/cybcube-analytics)

## Other roles at CyberCube

- [Senior Data Engineer](https://feeny.ai/job/senior-data-engineer-cybercube-tallinn-xha4njr7pmvb) — Tallinn, Estonia
- [Lead Actuary](https://feeny.ai/job/lead-actuary-cybercube-new-york-6f0edfpna0qb) — New York, NY
- [Senior Director, Marketing](https://feeny.ai/job/senior-director-marketing-cybercube-london-zynnkjcz6w7a) — London, United Kingdom
- [Senior Director, (Re)Insurance Sales](https://feeny.ai/job/senior-director-re-insurance-sales-cybercube-new-york-0cbjykrmgerx) — New York, NY
- [Cyber Threat Intelligence Lead](https://feeny.ai/job/cyber-threat-intelligence-lead-cybercube-london-323r0qjrkfvr) — London, United Kingdom
- [Cyber Threat Intelligence Principal](https://feeny.ai/job/cyber-threat-intelligence-principal-cybercube-london-exmckmc41ghh) — London, United Kingdom