Senior Threat Researcher - Endpoint / Cloud

Develop, maintain, and enhance advanced security detection rules across endpoint, cloud, and network environments.

Research emerging threats and improve detection coverage through anomaly-based and behavioral-based detection techniques.

Build documentation, conduct code reviews, troubleshoot detection code, and collaborate to improve detection efficacy and security visibility.

Minimum 5 years of experience authoring and maintaining security detections, particularly in endpoint, cloud, or network domains.

Strong expertise in detection development including anomaly and behavioral detections, and tuning to reduce false positives.

Experience with MITRE ATT&CK framework, packet capture analysis, threat intelligence, and Managed Detection and Response environments.

Work Experience Required: Minimum 5 years in security detection roles. Other requirements such as degree, notice period, or location: Not explicitly mentioned in the JD.

Experienced in developing detections using multiple telemetry sources and technologies including Security Information and Event Management, Endpoint Detection and Response, and network security monitoring.

Familiar with programming (Python, Go, Java, C++) and secure software development practices within Agile and DevOps frameworks.

Strategically focused on continuous detection improvement and innovation, operating effectively in large-scale cybersecurity product development environments.