Director, Security Research

🔥 20 hours ago

🇺🇸 United States – Remote

💵 $245k - $307k / year

⏰ Full Time

🔴 Lead

👮‍♂️ Cybersecurity / Security Engineer

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 1%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Sysdig

WebsiteLinkedInAll Job Openings

201 - 500 employees

Founded 2013

🔒 Cybersecurity

🏢 Enterprise

💰 $350M Series G on 2021-12

Cybersecurity • Cloud Security • Enterprise

Sysdig is a company that provides cloud and container security solutions. Their platform, Sysdig Secure, is designed to protect cloud-native applications by offering cloud workload protection, vulnerability management, and posture management. Sysdig focuses on real-time cloud security, detecting and responding to threats at cloud speed. The platform is a complete Cloud-Native Application Protection Platform (CNAPP) that prioritizes vulnerabilities, misconfigurations, and threats. Sysdig stands out for its runtime insights, allowing for near real-time alerting and efficient forensic investigations. They offer services across multi-cloud environments with a goal of safeguarding cloud credentials and preventing cyber threats.

📋 Description

• Lead the Sysdig Threat Research Team, owning adversary research and detection engineering • Set the research agenda, detection content roadmap, and budget; make final decisions on investigations and shipped work • Build AI security research capabilities covering model and agent abuse, agentic tool misuse, prompt-layer attacks, the AI supply chain, and AI-serving infrastructure • Translate research findings into tuned detections and blog posts • Lead and develop a small team of researchers and engineers while remaining hands-on • Own managed rulesets, cloud and identity detections, and detection quality • Conduct adversarial validation of shipped rules and improve coverage and evasion resistance • Own the detection platform, including toolchains, attack reproduction environments, behavior-based detection, and adversary-deception telemetry • Publish original discoveries, named campaigns, CVEs, conference presentations, and open-source contributions • Partner with Marketing on content and campaigns • Build reusable attack demonstrations, threat briefings, and advisory content for Sales Engineering and Customer Success • Partner with Product Engineering on future detection capabilities and attacker defeat analysis

🎯 Requirements

• 10+ years in security research, threat research, or detection engineering • 4+ years leading and developing researchers, with real ownership of an agenda, its outcomes, and its budget • Original AI security research with published work or shipped detections in adversarial ML, agentic and tool-abuse attack paths, prompt-layer attacks, model supply chain, or attacks on AI-serving infrastructure • Ability to write code, build tooling, and run analysis hands-on • Current use of agents to conduct research work, with opinions about their limitations • Public body of work including original discovery, CVEs, named campaigns, conference talks, or open-source tooling used by others • Ownership of detection content shipped to real users • Depth in Linux, containers, Kubernetes, and cloud internals at the syscall and control-plane level • Ability to manage an open-ended research agenda alongside a customer-deadline-driven detection queue • Credibility with customers' CISOs and researchers • Experience building a previously nonexistent research capability • Experience with capable adversaries such as APT actors or sophisticated offensive cyber groups, including attribution tradecraft • Open-source stewardship as a maintainer or substantial contributor on a security project with dependent users • Experience with AI security frameworks such as MITRE ATLAS, OWASP Top 10 for LLM Applications, or NIST AI RMF as an engineering problem • Research recognized by mainstream press, CERTs, or defenders

🏖️ Benefits

• Extra days off to prioritize your well-being • 401(k) Retirement Savings Plan with a 3% company match • Maternity and Parental Leave • Mental health support for you and your family through the Modern Health app • Full health benefits package for you and your family