we are looking for a Cyber Security Researcher II.
The Security Researcher role involves developing detection methods and techniques to identify emerging threats for customers. Collaboration with researchers, data engineers, and product teams is essential to convert threat intelligence into actionable analytics. The position emphasizes hands-on work, research-focused tasks, and teamwork to address real-world security challenges effectively.
In this role you will be:
Designing, building, and validating new detections across large-scale customer and cloud telemetry, transforming threat research into impactful results.
Developing AI-powered techniques to improve detection precision, prioritization, and automated investigative functionalities effectively.
Analyzing various data sources like forensics, Active Directory, network, and cloud to identify threats and anomalies.
Collaborating with data scientists, engineers, and researchers to implement detection methods and enhance accuracy, scalability, and resilience.
Leading key research initiatives and proofs-of-concept, shaping Hunt's detection and analytics platform's strategic direction in hybrid and cloud-native environments.
Translating investigations into clear recommendations while communicating insights and findings effectively to customers.
Requirements: 4+ years of experience in cybersecurity research, detection engineering, threat hunting, or incident response (including military experience).
Have hands-on experience in developing, testing, and tuning detections based on attacker behavior or system telemetry.
Have a solid understanding of networking protocols and technologies (TCP/IP, DNS, SMB, HTTP/S, etc.) and their application in cloud environments.
Be familiar with attacker tactics, techniques, and procedures (TTPs) and the MITRE ATT&CK framework (including Cloud TTPs).
Demonstrate programming skills in Python and SQL with experience analyzing large datasets using common tools.
Have a curious, team-oriented mindset and an interest in applying AI and automation to cybersecurity detection.
This position is open to all candidates.