Threat Researcher -Cloud & Endpoint Detection

About the role

We are looking for a Threat Researcher - Cloud & Endpoint Detection to join our Integrations Team and help achieve this mission. You'll be working as a Detection Engineer within Integrations, Detection, & Response (IDR), reporting directly to the Manager of Detection Engineering, XDR while working closely with Pipeline, Platform, Threat Enablement, and Artificial Intelligence teams.

What you'll do

• Third-Party Integration Detection Development
• Serve as a detection subject matter expert within the Integrations Team
• Apply broad expertise and knowledge across multiple telemetry domains, including endpoint, network, cloud, identity, and email
• Contribute to the development of detection strategies and principles to achieve coverage goals in creative and effective ways
• Produce detection specifications and coverage models and determine operational feasibility

What you need

• 4–7 yrs of experience
• Network security
• Linux
• Cloud security
• EDR
• IAM
• Python
• Any graduate

Good to have

• SIEM
• Splunk
• AWS
• GCP
• Azure
• Data modelling