--- title: 'Senior Staff Security Researcher at Reach Security' canonical: 'https://feeny.ai/job/senior-staff-security-researcher-reach-security-san-francisco-s6qhnt1bywzs' type: 'job' last_seen: '2026-09-10' --- # Senior Staff Security Researcher at Reach Security - **Company:** Reach Security - **Location:** San Francisco, CA - **Employment:** full-time - **Work type:** hybrid - **Posted:** 2026-08-21 - **Last confirmed live:** 2026-09-10 - **Apply:** https://jobs.ashbyhq.com/reach/446ac6b0-015f-4a84-9f0e-890b3fd069d3 ## Job description About Reach Security: Reach [www.reach.security](http://www.reach.security) integrates with your existing security tools to identify blind spots across your defenses, prioritize fixes, automatically remediate misconfigurations, and continuously validate that your security posture remains strong About the Role: Reach Security seeking a skilled Senior Staff Security Researcher who will Work closely with Engineering to translate research into product capabilities, continually expanding Reach’s integration and control library. Help prioritize new domain, product and control coverage and remediation mechanisms. In this role, you will: - Work closely with Engineering to translate research into product capabilities, continually expanding Reach’s integration and control library. - Help prioritize new domain, product and control coverage and remediation mechanisms. - Build reproducible research environments, tooling and sandboxes. - Replicate malicious behavior to design detection and prevention strategies and collect evidence of attempted/detected/blocked attacks. ## Requirements and skills - 10 + years of experience in Information Security and or Engineering - 5+ years of experience in offensive security, security research, detection engineering, red teaming, or vulnerability research. - Experience discovering, analyzing, or detecting sophisticated real-world attacks. - Strong software engineering skills with the ability to rapidly build research tooling and proof-of-concepts. - Deep curiosity and a habit of experimenting with new AI systems as they emerge. - Exceptional technical writing and communication skills. Working at Reach Security: - Competitive salary, and equity package - Comprehensive benefits package including: - Medical, dental, and vision insurance, including plan options with company-paid employee coverage - FSA, HSA, and 401(k) plans - Company paid life insurance and disability coverage, along with buy up options - Voluntary benefits including pet insurance, identify theft coverage, and legal services - Unlimited PTO and sick time ## About Reach Security ## Company Overview - **One-liner**: Reach Security provides an AI-native platform that integrates with an organization's existing security stack to continuously identify, prioritize, and automatically remediate configuration gaps, misconfigurations, and underutilized defenses. - **Entity Type**: Private (Series A) - **Headquarters**: San Francisco, California, USA - **Founded**: 2021 - **Founders**: Garrett Hamilton (CEO) and Colt Blackmore (CTO) ## Core Business - **Primary industry/industries**: Cybersecurity (Computer and Network Security) - **Target customers**: Enterprise security teams (B2B) - **Mission or purpose statement**: To help organizations find and fix the hidden risks their existing tools miss, transforming exposure insight into action and empowering a more resilient, proactive approach to cybersecurity. ## Products & Services - **Reach Platform (AI-Native Security Controls Operating System)**: A unified platform that integrates with identity, endpoint, email, and network security tools to analyze billions of configuration and security data points. It identifies blind spots, prioritizes fixes, and automatically remediates misconfigurations and configuration drift. The platform encompasses Threat Exposure Management, Security Posture Management, and Configuration Management. ## Market Standing - **Valuation/Market Cap**: Not publicly available - **Key Metric**: Total Funding: $30M USD - **Notable Investors/Partners**: Ballistic Ventures (led Series A), M12 - Microsoft's Venture Fund (led subsequent Series A), Silver Buckshot Ventures. Backed by industry luminaries including Barmak Meftah (General Partner, Ballistic Ventures), Mark McLaughlin (Ex-CEO/Chairman, Palo Alto Networks), Godfrey Sullivan (Ex-CEO, Splunk), and Nicole Perlroth (Author & Cybersecurity Journalist). - **Growth Signals**: Named "Best CTEM Solution 2026," recognized as a "Market Disruptor in Configuration Risk Intelligence," and a "Representative Provider of ASCA in 2026." The company has grown to approximately 70 employees. It has been recognized in a Gartner® Emerging Tech Report on Domain-Specific Language Models for SecOps. ## Competitive Advantages - **Domain-Specific AI**: The platform uses a purpose-built cybersecurity AI that understands security controls and attacker techniques, enabling it to identify misconfigurations and underutilized defenses that generic AI and manual reviews miss. - **Action-Oriented Platform**: Unlike traditional approaches that only surface issues, Reach drives prioritized, guided remediation and can automatically execute validated fixes across the security ecosystem. - **Continuous Monitoring**: The platform continuously detects and remediates configuration drift, helping organizations stay aligned to policy and prevent regressions. - **Rapid Time-to-Value**: The company claims results can be achieved in less than 5 days from account creation. ## Strategic Focus - **Hardening Existing Investments**: The core strategy is to help organizations make better use of the security tools they already have, closing gaps without adding operational burden or new complexity. - **AI-Powered Defense**: The company is focused on leveraging domain-specific AI models to harden security controls at a scale humans alone cannot achieve, specifically to counter AI-powered attacks. - **Proactive Security**: Shifting organizations from reactive security to a proactive, continuous posture management model. ## Why Work Here - **Culture**: The company fosters a collaborative and innovative work culture where every team member is encouraged to contribute ideas, take ownership of projects, and grow within their role. Values include creativity, transparency, and a passion for solving complex security challenges. - **Impactful Work**: Employees work on a high-impact mission to proactively defend organizations from cyber threats at a machine-speed scale. - **Team**: The team is composed of experts from leading security companies (Palo Alto Networks, Proofpoint, Cylance, Splunk, Sysdig), innovative startups, and FAANG, many with hands-on security practitioner experience. - **Remote/Hybrid/Office**: The company is headquartered in San Francisco and has an office presence, but offers remote flexibility for some roles (e.g., Senior Software Engineer roles are listed as remote). The typical time on-site is described as "None" for some roles, while the company also has an "OnSite Workspace." - **Engineering Culture**: Engineering is a large department (36% of staff). The leadership includes a Senior VP of Engineering with experience scaling teams at Lacework and Sysdig, and a VP of Engineering. The tech stack and specific engineering practices are not publicly detailed, but the focus on AI and data platform engineering suggests a modern, data-intensive environment. ## Sources 1. [reach.security](https://www.reach.security/) 2. [reach.security/company](https://www.reach.security/company) 3. [linkedin.com/company/reach-security](https://www.linkedin.com/company/reach-security) 4. [builtin.com/company/reach-security](https://builtin.com/company/reach-security) ## Other roles at Reach Security - [Principal Support Engineer - Network](https://feeny.ai/job/principal-support-engineer-network-reach-security-remote-7j6bxdn30rw5) - [Principal Support Engineer - Endpoint](https://feeny.ai/job/principal-support-engineer-endpoint-reach-security-remote-88qp8nfpnd7s) - [Senior Staff Software Engineer (Integrations)](https://feeny.ai/job/senior-staff-software-engineer-integrations-reach-security-san-francisco-vb4xg03wszpb) — San Francisco, CA - [Senior Staff Software Engineer (Data Platform)](https://feeny.ai/job/senior-staff-software-engineer-data-platform-reach-security-san-francisco-jbcac296dnsp) — San Francisco, CA - [Staff Software Engineer (Backend)](https://feeny.ai/job/staff-software-engineer-backend-reach-security-san-francisco-1gvwjjsth9ef) — San Francisco, CA