- Miami, Florida, United States
- Hybrid
- Full-time · Mid
- 3–5 years
We are looking for a Security Researcher focused on detection engineering for Windows and macOS to join our small, focused Threat Intelligence and Research team. You’ll own detections end to end: researching adversary behavior, turning that research into file-based and behavioral detection logic, validating it, and shipping it into our EDR product.
Responsibilities
- Own detections end to end: research the behavior, write the logic, validate it, and ship it into our EDR product.
- Develop and enhance file-based and behavioral detections for Windows and macOS (YARA, Sigma, and our own behavioral rule formats).
- Perform in-depth analysis of malware and adversarial behavior across both platforms to identify detection opportunities.
- Map detection coverage against adversary tradecraft (MITRE ATT&CK and real-world campaigns), find the gaps, and prioritize what to build next.
- Test and validate detections against real samples and emulated adversary behavior before they reach customers.
Requirements
- Nice to have: EDR
- Nice to have: next-gen antivirus products
- Nice to have: detection-as-code
- Nice to have: AI tools
- Nice to have: machine learning