You are the senior technical authority in the Security Operations Center, leading investigation and response for the organization's most complex and critical security incidents. You act as technical lead or incident commander during major events, perform advanced forensics and malware analysis, and lead proactive threat hunting to find threats that evade existing controls.
Locations (2)
Irving, Texas, United States
Dallas, Texas, United States
Responsibilities
Lead complex and critical incident response
Act as technical lead or incident commander for critical, high-impact incidents such as ransomware, business email compromise, data exfiltration, and insider threats
Direct containment, eradication, and recovery across multiple teams, making real-time technical decisions within delegated authority
Perform advanced forensic analysis of endpoints, memory, and cloud environments to establish root cause, attacker dwell time, and full scope of compromise
Provide clear incident briefings and status updates to your Manager, IT Security leadership, and stakeholders such as Legal, Privacy, and Communications
Monitor, analyze and research emerging cyber threats, vulnerabilities, and exploits to identify novel TTPs and their related mitigations.
Produce and test rules for hunting and enrichment (Yara, etc.)
Analyze threat attack life-cycle including its behavior, modus operandi and objectives.
Follow an exhaustive approach involving intelligence collection, signature creation, and initial malware analysis.
Research new methods and technologies to detect cyber threats, identify signals, and design approaches to use these signals to identify security threats and security breaches.
The role involves monitoring the global cyber threat landscape, tracking APT groups, and conducting proactive threat hunting across various environments.
Specialist in threat intelligence and hunting, responsible for monitoring, analyzing, and hunting cyber threats across endpoints, identities, networks, email, and cloud environments.
Specialist responsible for monitoring, analyzing, and hunting cyber threats across multiple environments, transforming intelligence into actionable insights.
We are looking for a Security Researcher focused on detection engineering for Windows and macOS to join our small, focused Threat Intelligence and Research team. You’ll own detections end to end: researching adversary behavior, turning that research into file-based and behavioral detection logic, validating it, and shipping it into our EDR product.
Responsibilities
Own detections end to end: research the behavior, write the logic, validate it, and ship it into our EDR product.
Develop and enhance file-based and behavioral detections for Windows and macOS (YARA, Sigma, and our own behavioral rule formats).
Perform in-depth analysis of malware and adversarial behavior across both platforms to identify detection opportunities.
Map detection coverage against adversary tradecraft (MITRE ATT&CK and real-world campaigns), find the gaps, and prioritize what to build next.
Test and validate detections against real samples and emulated adversary behavior before they reach customers.
Security ResearcherIru · Miami, US