Principal Product Researcher (EDR)
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Описание вакансии
TL;DR
Principal Product Researcher (EDR): Identifying and developing innovative ways to detect Windows OS threats and enhancing sensor capabilities with an accent on Windows internals, kernel coding, and telemetry analysis. Focus on building disproportionately effective solutions to counter evolving cyber threats and integrating AI to optimize research outputs.
Location: Remote, US
Compensation: $200,000 – $230,000 base plus bonus and equity
Company
is a remote-first cybersecurity company providing enterprise-grade protection for SMBs through a combination of in-house technology and a 24/7 human-led SOC.
What you will do
- Identify innovative detection methods for Windows OS threats and evaluate new telemetry opportunities.
- Develop cross-platform features leveraging telemetry from file systems, memory, process, and network activity.
- Research and implement sensor capabilities to support detection of attack techniques across Windows versions.
- Collaborate with Engineering and Detection teams to operationalize solutions and integrate detection logic.
- Utilize AI to improve the speed, quality, and impact of research outputs through prompts and workflows.
- Develop technical documentation and represent the company through public speaking, blogs, and CTFs.
Requirements
- Expertise in Windows OS internals, components, APIs, and design.
- Prior experience with Windows OS kernel coding and device drivers.
- Experience testing EDRs, bypasses, and evasion techniques.
- Proficiency in C/C++, C#, PowerShell, and Python.
- Comfortable with reverse engineering and using debuggers.
- Must be based in the United States.
Nice to have
- Familiarity with product management, incident response, and social engineering.
- Experience with MSP tools.
- Knowledge of MITRE ATT&CK matrix, SIGMA, Yara, and Elasticsearch/Kibana.
Culture & Benefits
- 100% remote work environment.
- Generous PTO, including vacation, sick time, and 12 weeks of paid parental leave.
- Comprehensive medical, dental, and vision insurance.
- 401(k) with a 5% company contribution.
- Stock options for all full-time employees.
- Allowances for home office setup ($500), monthly digital reimbursement ($75), and professional development.
Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →