Senior Threat Researcher Endpoint/Cloud - Detections

Develop, maintain, and enhance advanced detection rules across endpoint, cloud, and network environments.

Research emerging threats and improve detection coverage, including anomaly-based and behavioral-based detections.

Collaborate on detection tuning, documentation, and contribute to detection engineering lifecycle and security visibility enhancement.

6+ years experience authoring and maintaining security detections.

Strong expertise in endpoint, cloud, or network detection and signature development, including anomaly and behavioral detection.

Deep knowledge of networking protocols (TCP/IP, DNS, LDAP, NTLM) and threat detection methodologies using MITRE ATT&CK and threat intelligence.

Work Experience Required: 6+ years (explicitly mentioned).

Experienced with tuning detections to improve fidelity and reduce false positives, indicating attention to detail and operational impact.

Familiarity with Managed Detection and Response environments and security monitoring technologies, showing domain and environment expertise.

Skilled in researching network-based threat vectors and applying behavioral detection methods, aligned with innovative detection engineering.