Threat Researcher

Develop, optimize, and maintain Python and YAML-based scalable detection capabilities to protect customers against evolving cyber threats.

Improve detection quality, expand telemetry coverage, and build actionable detections across multiple security platforms and technologies.

Collaborate with cross-functional teams to design and implement novel detection methodologies and support operational material like runbooks and reports.

4+ years professional experience as a Detection Developer or Security Developer.

Hands-on experience developing with Python and YAML.

Experience with operating system telemetry including Windows Security logs, Sysmon, Linux telemetry, and Windows PowerShell monitoring.

Experience building Security Information and Event Management (SIEM) detections and endpoint detection and response (EDR) detections, including use of Sigma and YARA rules.

Experienced in developing behavioral, anomaly-based, and signature-based detections with strong focus on detection quality, scalability, and continuous improvement.

Skilled at debugging and problem-solving with ability to write clean, reusable, and secure code and participate in code reviews.

Able to work effectively across distributed and cross-functional teams and adapt to emerging cybersecurity technologies and trends.