Investigate emerging cyber threats and attacker behaviours, including those affecting AI and agentic AI systems, and work with teams across the business to turn findings into improvements to threat detection technology.
Locations (2)
Cambridge, Cambridgeshire, United Kingdom
London, England, United Kingdom
Compensation
£50,000 - £60,000 per annum (depending on experience) + excellent benefits
Responsibilities
Investigate emerging threat actor techniques, tactics and procedures (TTPs) across production and lab environments
Analyse security data to understand attacker behaviours and identify opportunities to improve detection and response
Work closely with development teams, sharing research findings and helping inform future research and product development
Support the development and testing of new approaches to detecting malicious or anomalous activity
Undertake data analysis, scripting and other technical research to continuously improve products and capabilities
A professional responsible for protecting computer systems, networks, and sensitive data from cyber-attacks, hacking attempts, and other security threats, analyzing and responding to cybersecurity events within the Group and its Maisons.
Compensation
Expected Salary Range: $135,000 – 140,000
Responsibilities
Monitor and analyze network traffic, system logs, and alerts to detect cybersecurity incidents.
Investigate and respond to cybersecurity incidents in real-time, including handling more complex and high-severity cases.
Work with a team of analysts to determine the scope, root cause, attack techniques, and impact of attacks.
Perform detailed analysis across endpoint, network, identity, and cloud data sources, including log analysis, process activity, and authentication events.
Support basic forensic investigations, including evidence collection, timeline reconstruction, and analysis of suspicious files or activities.
Requirements
Nice to have: experience supporting or guiding less experienced analysts
Conduct deep endpoint threat research, including malware reverse engineering, attacker techniques, exploitation, defense evasion, persistence, and emerging threats. Investigate false positives, false negatives, missed detections, and customer escalations to use findings to improve MDE protection quality.
Locations (3)
Reston, Virginia, United States
San Francisco Bay area, California, United States
New York City, New York, United States
Compensation
Security Research IC4 - The typical base pay range for this role across the U.S. is USD $119,800 - $234,700 per year. There is a different range applicable to specific work locations, within the San Francisco Bay area and New York City metropolitan area, and the base pay range for this role in those locations is USD $160,200 - $261,000 per year.
Responsibilities
Conduct deep endpoint threat research, including malware reverse engineering, attacker techniques, exploitation, defense evasion, persistence, and emerging threats.
Investigate false positives, false negatives, missed detections, and customer escalations and use findings to improve MDE protection quality.
Analyze MDE telemetry, malware samples, threat intelligence, customer incidents, and hunting data to identify new attack patterns and protection gaps.
Own detection work end to end, from threat hypothesis and technical analysis through implementation, testing, deployment, monitoring, and tuning.
Use AI and agentic workflows to automate investigation, enrichment, malware analysis, detection development, testing, and validation while retaining researcher judgment for final decisions.
Requirements
Doctorate in Statistics, Mathematics, Computer Science, Computer Security, or related field
Master's Degree in Statistics, Mathematics, Computer Science, Computer Security, or related field
Bachelor's Degree in Statistics, Mathematics, Computer Science, Computer Security, or related field
