P
Senior Security Researcher – Identity Threat Detection
On-siteFull-timeThreat IntelligenceCybersecurity
Join an identity threat detection team researching emerging attacker techniques and developing advanced detection models for SaaS, cloud, on-premises, and hybrid identity environments.
Responsibilities
- Research methods for detecting targeted attackers across endpoints, networks, cloud, and SaaS environments
- Simulate real-world attacks in laboratory environments and analyze attacker behavior
- Develop and refine statistics-based classification algorithms and detection models
- Research identity threat scenarios to improve detection capabilities
- Monitor advanced persistent threats, attacker methodologies, and tactics, techniques, and procedures
- Collaborate with security researchers and cross-functional teams to validate detection concepts using real-world data
Requirements
- At least 5 years of experience with Active Directory security and identity-related attacks
- In-depth knowledge of operating system internals
- Strong knowledge of network protocols including Kerberos, RPC, SMB, HTTP, SMTP, DNS, and DHCP
- Strong knowledge of enterprise infrastructure, including Active Directory, firewalls, VPNs, and security products
- Ability to own projects from initiation through completion
- At least 2 years of Python programming experience is preferred
Nice to have
- Experience with Entra ID or SaaS applications
- Python programming experience
- Strong SQL knowledge
- Entra ID red-teaming or penetration testing experience
- Experience with machine learning, data analysis, cloud infrastructure, or security