we are looking for a Senior Cyber Security Researcher.
The Senior Security Researcher role involves developing detection methods and techniques to identify emerging threats for customers. Close collaboration with researchers, data engineers, and product teams is essential. Together, you will translate threat intelligence into production-grade detections and shape the future of AI-powered security operations.
In this role you will be:
Designing, building, and validating new detections across large-scale customer telemetry, transforming threat research into impactful results.
Building and deploying AI agents for independent investigation workflows and detection engineering pipelines, incorporating context management, tool orchestration, and multi-step reasoning.
Evaluating and iterating on detection quality – measuring false positive rates, building benchmarks, and establishing feedback loops that continuously improve accuracy.
Analyzing diverse telemetry including network connections, Active Directory, cloud activity, endpoint data (Windows/Linux), segmentation policies, and vulnerability exposure to identify threats and anomalies.
Leading key research initiatives and proof-of-concepts, shaping Hunt's detection and analytics platform's strategic direction.
Translating cutting-edge research into clear, actionable recommendations and effectively communicating findings to customers and stakeholders.
The Senior Security Researcher role involves developing detection methods and techniques to identify emerging threats for customers. Close collaboration with researchers, data engineers, and product teams is essential. Together, you will translate threat intelligence into production-grade detections and shape the future of AI-powered security operations.
In this role you will be:
Designing, building, and validating new detections across large-scale customer telemetry, transforming threat research into impactful results.
Building and deploying AI agents for independent investigation workflows and detection engineering pipelines, incorporating context management, tool orchestration, and multi-step reasoning.
Evaluating and iterating on detection quality – measuring false positive rates, building benchmarks, and establishing feedback loops that continuously improve accuracy.
Analyzing diverse telemetry including network connections, Active Directory, cloud activity, endpoint data (Windows/Linux), segmentation policies, and vulnerability exposure to identify threats and anomalies.
Leading key research initiatives and proof-of-concepts, shaping Hunt's detection and analytics platform's strategic direction.
Translating cutting-edge research into clear, actionable recommendations and effectively communicating findings to customers and stakeholders.
Requirements:
5+ years of experience in cybersecurity research, detection engineering, threat hunting, or incident response (including military experience).
Demonstrate day-to-day use of AI coding agents and LLM-based development workflows as a core part of your engineering and research practice.
Design, test, and tune detections using attacker behavior insights and system telemetry through practical detection engineering experience.
Have solid understanding of networking protocols and technologies (TCP/IP, DNS, SMB, HTTP/S, etc.).
Be familiar with attacker tactics, techniques, and procedures (TTPs) and the MITRE ATT&CK framework.
Demonstrate Python and SQL expertise with experience handling extensive security data in cloud data warehouses like BigQuery.
5+ years of experience in cybersecurity research, detection engineering, threat hunting, or incident response (including military experience).
Demonstrate day-to-day use of AI coding agents and LLM-based development workflows as a core part of your engineering and research practice.
Design, test, and tune detections using attacker behavior insights and system telemetry through practical detection engineering experience.
Have solid understanding of networking protocols and technologies (TCP/IP, DNS, SMB, HTTP/S, etc.).
Be familiar with attacker tactics, techniques, and procedures (TTPs) and the MITRE ATT&CK framework.
Demonstrate Python and SQL expertise with experience handling extensive security data in cloud data warehouses like BigQuery.
This position is open to all candidates.
