Principal Security Researcher – EDR, Windows

🔥 1 hour ago

🇺🇸 United States – Remote

💵 $200k - $230k / year

⏰ Full Time

🔴 Lead

👮‍♂️ Cybersecurity / Security Engineer

Where this job comes from

Posted on Huntress's careers page, not through a job board

First seen by Remote Rocketship 1 hour ago

Logo of Huntress

Huntress

201 - 500 employees

💼 Consulting

🏥 Healthcare

🏭 Manufacturing

Consulting • Healthcare • Manufacturing

Huntress is a cybersecurity firm that provides managed detection, investigation, and response solutions to protect endpoints, identities, and email environments. It offers a platform with managed EDR, security awareness training, ITDR for Microsoft 365, and SIEM solutions, all supported by a 24/7 Security Operations Center. Huntress is designed to secure small and medium-sized businesses against cyber threats. Their services help organizations across industries, ensuring robust protection and compliance, especially in environments like education, finance, healthcare, manufacturing, and government.

📋 Description

• Identify innovative ways to detect Windows OS threats • Develop cross-platform features leveraging file system, memory, process, and network telemetry • Research and develop sensor capabilities for visibility and detection across supported Windows OS versions • Collaborate with engineering and detection teams to implement detection logic • Identify and evaluate new telemetry opportunities • Identify and address product coverage gaps • Respond to product escalations • Perform false positive and false negative investigations • Lead product research initiatives evaluating security product strategies and technologies • Coordinate with Product and Engineering teams to integrate and operationalize Threat Operations solutions • Use AI for information gathering, analysis, prototyping, and decision-useful work products • Build reusable prompts, templates, and workflows for recurring research tasks • Develop technical documentation for customers and adjacent teams • Mentor and teach technical expertise • Promote Huntress through media interaction, public speaking, CFPs, CTFs, and blogs

🎯 Requirements

• Expert in Windows OS internals, components, APIs, and design • Prior experience with Windows OS kernel coding and device drivers • Experience testing EDRs, bypasses, and evasion techniques • Comfortable with reverse engineering and using debuggers • Proficiency in multiple programming/scripting languages, such as C/C++/C#, PowerShell, and Python • Applies AI to improve research quality, speed, and outputs in day-to-day work • Commitment to clear documentation of research findings • Experience with MITRE ATT&CK matrix, SIGMA, Yara, and Elasticsearch/Kibana • Experience managing, deploying, and securing SMB environments using security software, best practices, and automation tools • Familiarity with product management, incident response, social engineering, psychology, education, and managed service provider tools is an additional differentiator

🏖️ Benefits

• 100% remote work environment • Generous paid time off policy, including vacation, sick time, and paid holidays • 12 weeks of paid parental leave • Highly competitive and comprehensive medical, dental, and vision benefits plans • 401(k) with a 5% contribution regardless of employee contribution • Life and Disability insurance plans • Stock options for all full-time employees • One-time $500 reimbursement for building/upgrading home office • Annual allowance for education and professional development assistance • $75 USD/month digital reimbursement • Access to the BetterUp platform for coaching, personal, and professional growth • Bonus and equity in addition to base compensation

Apply Now

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Similar Jobs

🔥 4 hours ago

ServiceNow

10,000+ employees

🏢 Enterprise

☁️ SaaS

🤖 Artificial Intelligence

Staff Security Engineer automating continuous security compliance for Moveworks’ agentic AI platform. Building evidence pipelines, control monitoring, and audit systems for ServiceNow-backed enterprise workflows.

🔥 4 hours ago

ServiceNow

10,000+ employees

🏢 Enterprise

☁️ SaaS

🤖 Artificial Intelligence

ServiceNow director leading Security and Risk Services delivery across US and Canada. Driving AI-powered security automation, customer transformation, and enterprise delivery excellence.

🔥 4 hours ago

ServiceNow

10,000+ employees

🏢 Enterprise

☁️ SaaS

🤖 Artificial Intelligence

Security Success Architect guiding enterprise customers on Armis and ServiceNow security integrations. Driving adoption, architecture, performance, and measurable business outcomes.

🔥 4 hours ago

Peraton

10,000+ employees

💼 Consulting

🏥 Healthcare

📦 Logistics

Security Architect designing and governing enterprise, cloud, and federal security architectures for Peraton. Translating mission and regulatory requirements into secure technical solutions and standards.

🔥 5 hours ago

Smartsheet

1001 - 5000

💼 Consulting

🏥 Healthcare

📣 Marketing

Principal Security Engineer leading threat modeling, product security, and AI security for Smartsheet’s SaaS platform. Setting AppSec standards and influencing engineering architecture across U.S. remote teams.

Developed by Lior Neu-ner. I'd love to hear your feedback — Get in touch via DM or support@remoterocketship.com
Follow Remote Rocketship on LinkedInFollow Remote Rocketship on InstagramFollow Remote Rocketship on FacebookFollow Remote Rocketship on TikTok