Security Research Engineer, Attack Surface & Risk Signals

About Cyber Cube:

Cyber Cube delivers the world's leading analytics to quantify digital risk
, helping the largest global carriers, reinsurers and brokers understand, price and manage cyber risk in financial terms.

• AI at our foundation, cyber risk at our core. We don't just use AI, we shape it.
• Built on AI from day one. Artificial intelligence has been part of our strategy since the beginning, blended with deep cybersecurity and insurance expertise and backed by rigorous testing.
• Trusted by more than 100 clients, including 75% of the top 40 European and US cyber insurance carriers and 70% of the top ten reinsurance brokers.
• Backed for global growth. In 2025 Spectrum Equity joined some of Cyber Cube’s financial partners as a new cornerstone investor, accelerating our global growth and fueling innovation across our end-to-end cyber risk analytics for the insurance industry.
• A truly global team across San Francisco, New York, London, and Tallinn.
• collaboration, openness, intellectual rigor, and ownership for excellence.
• People at the forefront. We encourage Cyber Cubers to challenge themselves, push boundaries, and do the best work of their careers.

About the Role Are you fascinated by the underlying architecture of the internet? Do you look at complex network configurations and immediately see the quantitative risk exposure?

As a Quantitative Cyber Risk Engineer
, you will play a critical role at the intersection of network engineering, cybersecurity, and data science. We are looking for an expert who deeply understands how the internet is wired—down to the protocol level—and possesses the quantitative prowess to translate that knowledge into computable risk metrics.

In this role, you will analyze how global businesses configure their internet-facing assets and design mathematical signals that accurately quantify their exposure to cyber attacks. Working alongside Data Scientists, Engineers, and Product teams, your research and models will directly drive the next generation of risk-scoring and analytical engines for the cyber insurance industry.

If you are passionate about turning theoretical network vulnerabilities into actionable, real‑world risk signals that influence a global industry, this is the role for you.

• Design Risk Signals: Develop innovative, quantitative signals that accurately measure a company’s exposure to cyber attacks based on their network architecture, asset configurations, and internet footprint.
• Quantify the Unquantifiable: Translate theoretical cybersecurity concepts and complex network topologies into empirical, actionable risk metrics and assumptions.
• Architectural Deep-Dives: Evaluate and extract meaningful insights from how organizations deploy and configure internet-facing protocols, cloud infrastructure, and enterprise networks.
• Threat Landscape Research: Conduct in-depth research on emerging cyber threats (e.g., critical vulnerabilities, ransomware, trending exploits, data breach techniques) and map them to underlying asset configurations.
• Cross-Functional Collaboration: Serve as the subject matter expert on internet architecture, working closely with product, analytics, and engineering teams to integrate your risk signals into production models.

• Deep Internet & Networking Expertise: Expert-level understanding of how the internet works at a foundational level. You should be intimately familiar with network protocols (TCP/IP, BGP, DNS, HTTP/S, TLS), routing, ASN ecosystems, and complex enterprise network configurations.
• Strong Quantitative Acumen: Proven ability to apply mathematical and statistical concepts to real-world problems. You must be able to design quantitative metrics and build…