This role is ideal for a deeply technical researcher who is driven to understand attacks at their core – not just identify surface-level indicators. You will research exploitation chains, runtime behavior, attacker techniques, and emerging AI attack patterns, then apply that knowledge to build protections that are precise, resilient, scalable, and grounded in how attacks actually work.
Specifically, you will:
Research real-world attack techniques targeting modern applications, cloud-native environments, and AI-driven systems.
Design, develop, validate, and deploy detection algorithms based on technical research, large-scale runtime telemetry, threat intelligence, and exploit PoCs.
Shape the strategy for detection data collection by defining the required telemetry, collection points, and data quality standards needed to support effective protection.
Drive research efforts end-to-end, from initial exploration and technical investigation to production-grade protection capabilities for active threats.
Work closely with engineering and product teams to turn research into practical security capabilities.
5+ years of experience in security research, vulnerability research, detection engineering, threat detection engineer, or a related technical security role.
Strong understanding of modern application attack techniques, including the ability to analyze vulnerabilities and exploitation flows.
Deep expertise in Linux internals.
High degree of ownership and ability to independently navigate ambiguous technical problem spaces and turn them into structured research plans and actionable outcomes.
Experience designing and conducting hands-on technical research, including investigations, experiments, and PoC development.
Strong programming skills for code analysis, research tooling, and building proof-of-concepts and vulnerable test applications.
Strong communication and teamwork skills, with a collaborative approach to problem-solving across teams.
Data analysis skills and hands-on experience working with databases.
