Senior Threat Researcher (Integrations Team)

Lead development of detection rules and correlation logic across multiple telemetry sources including endpoint, network, cloud, identity, and email to provide broad XDR coverage.

Provide technical guidance to detection engineers and collaborate with integration teams to onboard and maximize security value from new third-party data sources.

Research emerging threats and adversary tactics to design effective detection strategies, validate detection efficacy, and continuously improve detection coverage.

6+ years experience in Detection Engineering, Threat Hunting, Security Research, SOC Engineering, or Security Analytics.

Expert-level Python skills for building detection tooling and automation.

Proven experience with diverse telemetry sources (endpoint logs, network NetFlow, cloud audit logs, identity provider logs, email phishing indicators) and detection technologies (e.g., KQL, SPL, Sigma, SQL).

Work Experience Required: 6+ years in relevant security detection roles. Notice period: Not explicitly mentioned in the JD.

Strong domain expertise across multiple telemetry domains with ability to analyze and develop detections for new third-party security integrations rapidly.

Experience providing technical leadership and strategic input on detection coverage design, testing, and evaluation in large-scale XDR programs.

Background likely includes roles in Detection Engineering, SOC Content Development, or XDR detection with focus on understanding attacker behavior and cross-domain threat detection.