Cybersecurity Threat Researcher
About the job
- A Bachelor of Science degree or equivalent and three years of experience, or a Master of Science degree or equivalent and one year of experience.
- Be well versed in indicators of compromise, reverse engineering, and threat campaign tracking.
- Have experience analyzing malicious URLs and phishing emails.
- Have experience in customer-facing environments.
- Have experience triaging complex customer queries.
- Deploy and configure security products and solutions, including endpoint, email, web, and network protection.
- Analyze trends and patterns in large datasets to establish threat trends across regions, industries, and business segment sizes.
- Investigate phishing emails and perform malware analysis, including configuring an isolated malware analysis virtual machine, identifying file formats, and conducting basic static and dynamic analysis.
- Use threat actor tools and techniques.
- Share threat knowledge with team members and external stakeholders in customer-facing environments.
- Assist and enable departments with threat intelligence.
- Triage, investigate, and respond to alerts from the email platform efficiently and independently.
- Conduct independent research projects and regularly contribute to external-facing Threat Labs content, such as blogs.
- Familiarity with Python automation.
- Experience with databases, including SQL or MQL.
About the company
KnowBe4 provides a security awareness training and phishing simulation platform designed to reduce human-vulnerability risk from social engineering. It delivers a library of training modules and realistic phishing simulations through a subscription-based service that is built to be user-friendly and scalable for businesses of all sizes. The platform focuses on rapid deployment so IT teams can start in production quickly, often twice as fast as competitors, with a dedicated Customer Success team that handles onboarding without extra consulting hours. Compared to competitors, KnowBe4 combines a large, ready-to-use training library with easy-to-use tooling and fast onboarding to help organizations strengthen their human defenses more efficiently. The company’s goal is to lower security risk by educating employees and testing their responses to phishing and social engineering.
Company Size
1,001-5,000
Company Stage
IPO
Headquarters
Clearwater, Florida
Founded
2010
Get referred to KnowBe4
See people who can refer or advise you
Simplify's Take
What believers are saying
- October 2, 2026 browser control launch targets urgent enterprise fear around shadow AI.
- September 1, 2026 Google Workspace Defend extends revenue into massive collaboration-security budgets.
- September 2, 2026 Kurt Mills strengthens channel sales, accelerating partner-led expansion worldwide.
What critics are saying
- Google and Microsoft can bundle competing awareness features into core subscriptions by 2027.
- Shadow AI extensions commoditize KnowBe4's new controls, pressuring pricing and margins.
- Browser policies and email security require constant tuning; one false-positive campaign triggers customer churn.
What makes KnowBe4 unique
- KnowBe4 pairs phishing training with real-time browser enforcement through Agent Risk Manager.
- Its platform uses 16 years of behavioral data across 70,000 customers.
- Workday Learning integration embeds security training inside existing HR workflows.
Help us improve and share your feedback! Did you find this helpful?
Benefits
Financial Security - 3.5% 401k Matching, Company-wide Monthly Bonuses Up To $2,000 A Month, Employee Referral Bonuses, Employee Stock Purchase Program
Health and Wellness - Fully Paid Medical Insurance, Vision and Dental Plans, FSA (Flexible Spending Account), Free Gym Benefits Through Classpass, Virtual Yoga Classes, Free Fresh Fruit Delivered Weekly
Vacation, Time Off and Leave - Open Paid Time Off, National Holidays, Fully Paid Military Leave
Continuing Education - Tuition Reimbursement Up To $5,250 A Year, Certification Completion Bonuses Up To $10,000 A Year
Remote Work Options
Supporting Families - 8-weeks Fully Paid Parental and Adoption Leave, Breast Milk Shipping for Traveling Parents, Adoption Assistance, Fertility Assistance, Knowster Parents Employee Resource Group
On-site Life Coach
Growth & Insights and Company News
6 month growth
↑ 1%1 year growth
↑ 1%2 year growth
↑ 0%KnowBe4 adds browser extension to curb shadow AI use. Fri, 2nd Oct 2026 (Today) KnowBe4 has added a browser extension for Chrome and Edge to its Agent Risk Manager product, giving security teams real-time control over unsanctioned AI use in the browser. The update targets what security teams often call shadow AI: employees using chatbots, coding assistants, meeting transcription tools and other browser-based AI services without approval from IT or security. The extension can identify access to known AI sites and allow administrators to permit, warn or block that access at the point of use. The move comes as companies try to balance employee demand for AI tools with concerns about data leakage, governance and cyber risk. In research cited by KnowBe4, 52% of organisations said their AI use was unapproved or ungoverned. The same research found that more than a third of employees commonly source their own agentic AI tools when approved options are unavailable or restrictive. That has created a new challenge for employers. Many businesses already track software use through dashboards or network monitoring, but those systems often show activity only after staff have used an external service. KnowBe4 is positioning the extension as a way to move from monitoring to intervention within the browser session itself. Matt Duren, Senior Vice President of AI and Data at KnowBe4, said the main issue for security teams is not simply knowing that staff are using unauthorised AI tools, but being able to stop or manage that activity in time. "Visibility alone does not stop a data leak, it just documents it," said Matt Duren, Senior Vice President of AI and Data at KnowBe4. He said the launch also reflects broader pressure on security teams to take stock of AI use across their organisations. "Security teams have been instructed to take an inventory of the AI tools running in their environment. While that is necessary, it is not enough. With this extension, the same capability that discovers shadow AI can now act on it in real time without forcing security teams to choose between locking AI down and letting it run unchecked," Duren said. Platform link The browser extension sits within KnowBe4's wider platform rather than operating as a standalone tool. In practice, that means data on shadow AI usage is intended to feed into the same user risk profile that already includes phishing simulation results, security awareness training and real-time coaching. The approach draws on 16 years of behavioural risk data across more than 70,000 customers. For corporate security teams, that means AI-related behaviour is being treated as part of the same broader human risk picture as clicking phishing links or ignoring security prompts. That reflects a wider shift in cybersecurity products towards combining user behaviour, access controls and security training in a single system. Vendors in the sector increasingly argue that AI use is not only a technology procurement issue but also a workforce risk issue, particularly when staff paste internal information into public tools or use consumer services to complete work tasks. Access scope The extension is available to Security Awareness Training Advanced customers on direct-sale US tenant accounts through an early access programme. Broader availability is planned in the coming months, though KnowBe4 did not provide a more detailed timetable. The restricted rollout suggests the company is testing demand and operational use before a wider release. Early-access launches are common in cybersecurity, where vendors often need customer feedback on policy controls, false positives and administrative workflows before expanding a product across regions and account types. For users, one practical issue will be how organisations define acceptable AI use. A system that can block, warn or allow access still requires companies to decide which tools fall into each category. That can be difficult in a market where consumer AI services change quickly, new browser-based assistants appear regularly and business units often adopt tools faster than central governance teams can review them. Market pressure KnowBe4 is best known for security awareness training and phishing simulations, and the extension adds another layer to a market that has traditionally focused on educating employees rather than directly controlling browser behaviour. By connecting browser activity to existing training and risk scoring, the company is extending its role from awareness into active policy enforcement around AI use. The broader commercial logic is clear. As companies introduce internal AI rules, security buyers are looking for tools that can show where employees are using unsanctioned services and provide immediate options for handling that behaviour. Products that only list AI usage may satisfy reporting needs, but they may not address the problem of sensitive information entering external systems before a security team can respond. Shadow AI activity captured in the browser does not sit in a separate console and instead feeds into the same organisational risk profile as phishing simulations, security awareness training and real-time coaching.
KnowBe4, a cybersecurity company focused on digital workforce security, has appointed Kurt Mills as channel chief to lead its global partner programmes and operations. Mills brings 25 years of channel leadership experience from previous executive roles at Trellix, Check Point Software Technologies, Mimecast, FireMon, and Blue Coat Systems. The appointment reflects KnowBe4's continued investment in partner-led growth strategy. Mills will work to scale partner programmes and strengthen relationships across VARs, MSPs, system integrators, distributors, and technology partners. KnowBe4 recently bolstered its channel leadership team with the additions of Neill Burton and John Noha, both as vice presidents of channel. The company serves over 70,000 organisations worldwide, providing security training, email protection, and AI-powered defence solutions.
KnowBe4 launches new integration with Workday Learning to streamline security awareness and compliance training. New Workday Cloud Connect for Learning integration automatically synchronizes training records and keeps content up-to-date, reducing administrative effort KnowBe4, a cybersecurity company specializing in digital workforce security, securing both AI agents and humans, today announced it has launched KnowBe4 for Workday Learning, a Workday Cloud Connect for Learning (CCL) integration. The integration enables organizations to deliver KnowBe4 security awareness and compliance training seamlessly through Workday Learning while automatically synchronizing records to reduce administrative overhead. As a Workday Innovation Partner, KnowBe4 has achieved the Workday Design Approved Integration badge. KnowBe4 for Workday Learning connects KnowBe4's training library directly with Workday Learning, powered by Sana, giving organizations a streamlined way to manage security awareness training from within their existing learning ecosystem. With a single integration, customers can keep training content current, eliminate manual record reconciliation and maintain accurate, real-time training data within Workday Learning. Key capabilities include: * Real-time training record synchronization: KnowBe4 training activity and completion records are automatically updated in Workday Learning in near real time, helping organizations maintain accurate, audit-ready transcripts. * Native catalog syncing: KnowBe4's training content catalog is integrated directly into the Workday Learning content picker and synced five days a week to help ensure organizations always have access to the latest training content. * Seamless SSO access: Single sign-on from Workday to KnowBe4 lets learners launch training directly from their Workday dashboard, helping reduce dropoff caused by separate logins or portals. "As organizations manage a digital workforce security program that includes both humans and AI agents, security awareness and compliance programs need to be effective without becoming operationally complex," said Greg Kras, chief product officer at KnowBe4. "KnowBe4 content being delivered via Workday Learning helps organizations streamline how they deliver training while helping ensure completion records remain accurate and up to date within Workday Learning. By reducing manual effort and improving data integrity, organizations can spend less time managing records and more time strengthening the security of their digital workforce." This integration is available to customers on KnowBe4 Attack Simulation & Training offers including Diamond, Training-Only Diamond, SAT Advanced subscriptions and Workday Learning with the CCL SKU. More information on KnowBe4's integration can be found on the Workday Marketplace, which provides easy access to solutions built by Workday and its partners. About KnowBe4. KnowBe4 empowers the modern workforce to make smarter security decisions every day. Trusted by more than 70,000 organizations worldwide, KnowBe4 is the pioneer of digital workforce security, securing both AI agents and humans. The KnowBe4 Platform provides attack simulation and training, email & collaboration security, and agent security powered by AIDA (Artificial Intelligence Defense Agents) and a proprietary Risk Score. The platform leverages 15 years of behavioral data to combat advanced threats including social engineering, prompt injection, and shadow AI. By securing humans and agents, KnowBe4 leads the industry in workforce trust and defense.
KnowBe4 has launched a browser extension for Chrome and Edge that gives security teams real-time control over shadow AI usage. The new feature, part of the expanded Agent Risk Manager, can allow, warn, or block employee access to unsanctioned AI sites immediately, rather than simply flagging them after use. According to KnowBe4's recent report, 52% of organisations report their AI use is unapproved or ungoverned. Over a third of employees commonly source their own AI tools when official options are unavailable or restrictive. The extension integrates with KnowBe4's broader platform, which draws on 16 years of behavioural risk data across more than 70,000 customers. Shadow AI activity captured at the browser feeds into the same risk profile as phishing simulations and security awareness training. The feature is currently available to Security Awareness Training Advanced customers on direct-sale, US-tenant accounts, with broader availability planned.
KnowBe4 shuts down shadow AI with agent security innovation. New Agent Risk Manager browser extension performs active discovery of new and unknown domains allowing security admins to block, warn or allow the sites KnowBe4, the global leader in digital workforce security, securing both AI agents and humans, today announced a significant expansion of Agent Risk Manager, with the launch of a new native browser extension for Chrome and Edge that gives security teams real-time control over shadow AI. This new capability moves beyond existing dashboards that flag unsanctioned AI use after the damage is done, to a control point that can allow, warn or block employee access to known AI sites the moment it happens. With unsanctioned chatbots, coding assistants, meeting transcribers and browser-based AI agents, employees are adopting shadow AI without IT's knowledge. Shadow AI has emerged as one of the most difficult risks for security teams to contain. According to the recent KnowBe4 "From Agentic Risk to Human Wins" report, 52% of organizations report their use of AI is unapproved or ungoverned. The same report also found over a third of employees reported that they commonly source their own agentic AI tools where options are unavailable or restrictive, leaving organizations vulnerable to cyberattacks. "Visibility alone does not stop a data leak, it just documents it," said Matt Duren, SVP of AI and data, KnowBe4. "Security teams have been instructed to take an inventory of the AI tools running in their environment. While that is necessary, it is not enough. With this extension, the same capability that discovers shadow AI can now act on it in real time without forcing security teams to choose between locking AI down and letting it run unchecked." Where many shadow AI and browser-security offerings operate as standalone extensions or network layer add-ons, Agent Risk Manager sits inside the broader KnowBe4 Platform, which draws on 16 years of behavioral risk data across more than 70,000 customers. That means shadow AI activity captured at the browser does not sit in an isolated console, it feeds the same risk profile as an organization's phishing simulations, security awareness training, and real-time coaching, and lays the groundwork for a unified Risk Score. The shadow AI browser extension is available now to Security Awareness Training Advanced customers on direct-sale, U.S.-tenant accounts as part of Agent Risk Manager Early Access. Broader availability is planned in the coming months. Customers can learn more or self-onboard at www.knowbe4.com/products/ai-agent-risk-manager. FAQs. Q: What does the shadow AI discovery capability do? * Quantifies real usage: For every tool it finds, it shows when it was first seen, how many distinct users have touched it, and how many usage events occurred, so security teams can prioritize based on actual exposure. * Enables one-click governance: Directly from the discovery row, security teams can hit "Add Rule" to turn a discovered tool into a governed one (approved, warn, or blocked), or "Dismiss" it out of the queue without exporting data, using a separate tool, or submitting an engineering ticket. Q: What are the benefits of the shadow AI discovery capability? Q: what is the KnowBe4 Risk Score? Q: What is KnowBe4 and who is it for? About KnowBe4. KnowBe4 empowers the modern workforce to make smarter security decisions every day. Trusted by more than 70,000 organizations worldwide, KnowBe4 is the pioneer of digital workforce security, securing both AI agents and humans. The KnowBe4 Platform provides attack simulation and training, email & collaboration security, and agent security powered by AIDA (Artificial Intelligence Defense Agents) and a proprietary Risk Score. The platform leverages 15 years of behavioral data to combat advanced threats including social engineering, prompt injection, and shadow AI. By securing humans and agents, KnowBe4 leads the industry in workforce trust and defense.