Senior Threat Researcher – Endpoint/Cloud, Detections

🔥 0 minutes ago

🇮🇳 India – Remote

⏰ Full Time

🟠 Senior

✨ Researcher

👻 Ghost score 10%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Arctic Wolf

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

Founded 2012

The cybersecurity industry has an effectiveness problem. Every year new technologies, vendors, and solutions emerge, and yet despite this constant innovation we continue to see high profile breaches in the headlines. All organizations know they need better security, but the dizzying array of options leave resource-constrained IT and security leaders wondering how to proceed. At Arctic Wolf, our mission is to End Cyber Risk through effective security operations. To achieve this, we believe that organizations must do three key things:

📋 Description

• Develop and maintain high-quality custom detection rules across endpoint, cloud, and network environments • Research emerging threats, attack techniques, and telemetry sources to improve detection coverage and effectiveness • Design, develop, and continuously improve anomaly-based and behavioral-based detections • Conduct code reviews and provide constructive feedback to ensure code quality, maintainability, and scalability • Troubleshoot, debug, and enhance existing detection and signature codebases • Participate in the full software development life cycle by building secure, efficient, testable, and maintainable detection content • Collaborate with team members to develop innovative detections and continuously tune existing detection capabilities • Propose improvements to detection coverage, efficacy, and overall security visibility • Build runbooks, reports, documentation, and supporting materials for detection surfaces • Document research findings and share knowledge across engineering, security operations, and research teams • Communicate technical concepts and security findings effectively to technical and non-technical audiences • Learn and adopt industry best practices in software development, detection engineering, and cybersecurity • Participate in research and development demonstrations, innovation initiatives, and annual hackathon events

🎯 Requirements

• 6 or more years of experience authoring and maintaining security detections • Strong expertise in endpoint, cloud, or network detection and signature development • Experience developing anomaly-based and behavioral-based detections • Extensive experience tuning and optimizing detections to improve fidelity and reduce false positives • Deep knowledge of networking concepts, protocols, and authentication technologies including Transmission Control Protocol/Internet Protocol, Domain Name System, Lightweight Directory Access Protocol, and New Technology LAN Manager • Proven experience researching and developing detections related to network-based threat vectors • Experience using MITRE ATT&CK, packet capture analysis, and threat intelligence sources to drive detection development • Strong knowledge of cybersecurity principles, threat detection methodologies, and adversary behaviors • Experience working with security monitoring and detection technologies within Managed Detection and Response environments • Experience developing Security Information and Event Management detections • Experience creating Endpoint Detection and Response detections and signatures • Experience authoring Sigma and YARA rules • Experience developing cloud security detections • Experience with programming languages such as Python, Go, Java, or C++ • Experience with Test Driven Development methodologies • Experience using DevOps practices, tooling, and automation frameworks • Experience applying secure software development practices • Experience building and deploying solutions in cloud environments including Amazon Web Services, Microsoft Azure, and Google Cloud Platform • Experience working with Kubernetes, containers, infrastructure-as-a-service, and platform-as-a-service technologies • Experience working within Agile software development methodologies including Scrum and Kanban • Experience with Next Generation Firewall technologies from vendors such as Palo Alto Networks, Cisco, or Fortinet • Experience using open-source intrusion detection, intrusion prevention, and network security monitoring technologies such as Zeek or Suricata • Background checks are required for this position • The role may require access to information protected under United States export control laws and regulations

🏖️ Benefits

• Equity for all employees • Flexible annual leave, paid holidays, and volunteer days • Training and career development programs • Comprehensive private benefits plan including medical insurance for you and your family • Life insurance equal to three times compensation • Personal accident insurance • Fertility support • Paid parental leave • Volunteer days