Senior Threat Researcher Endpoint/Cloud - Detections

Overview

Senior Threat Researcher focused on Endpoint/Cloud detections, contributing to detection engineering by building and enhancing security detections across endpoint, cloud, and network environments.

What you'll do

• Develop and maintain custom detection rules across endpoint, cloud, and network environments.
• Research emerging threats, attack techniques, and telemetry sources to improve detection coverage.
• Design, develop, and continuously improve anomaly-based and behavioral-based detections.
• Conduct code reviews and provide constructive feedback to improve code quality and maintainability.
• Troubleshoot, debug, and enhance existing detection and signature codebases.
• Build runbooks, reports, documentation, and supporting materials for detection surfaces.

What you'll need

• 6+ years of experience authoring and maintaining security detections.
• Strong expertise in endpoint, cloud, or network detection/signature development.
• Experience developing anomaly-based and behavioral-based detections.
• Extensive experience tuning and optimizing detections to reduce false positives.
• Deep knowledge of networking concepts, protocols, and authentication technologies including TCP/IP, DNS, LDAP, and NTLM.
• Experience using MITRE ATT&CK, packet capture analysis, and threat intelligence sources for detection development.

Details

• Location: Bengaluru, India.
• Background checks are required for this position.
• This role may require access to information protected under United States export control laws and regulations.