Senior Threat Researcher

New

Skills

Adversary Emulation Analytics Queries Data Enrichment Detection Engineering Incident Response MITRE ATT&CK Security Graph Modeling Security Telemetry Threat Intelligence Threat Research

As a Senior Threat Researcher, you will be responsible for analyzing large-scale security data to identify attacker behaviors, tactics, techniques, and procedures (TTPs), and associated risks. You will map these behaviors to the MITRE ATT&CK framework and real-world tradecraft, modeling attack paths using the Illumio security graph to minimize lateral movement within networks.

Key Responsibilities
  • Analyze security data to identify attacker behavior and risks.
  • Map behaviors to MITRE ATT&CK and real-world tradecraft.
  • Model attack paths with Illumio security graph.
  • Identify gaps in detection, data enrichment, and segmentation.
  • Develop and validate hypotheses about evolving threats.
  • Translate research findings into product improvements.
Required Skills & Qualifications
  • 5+ years in threat research, incident response, or detection engineering.
  • Strong knowledge of attacker tradecraft across enterprise, cloud, and hybrid environments.
  • Deep understanding of MITRE ATT&CK and TTP mapping.
  • Hands-on experience with security telemetry sources.
  • Excellent written and verbal communication skills.
  • Experience writing detection rules and analytics queries.
  • Previous experience at a cybersecurity product company.
  • Track record of publishing threat research or speaking at conferences.
  • Experience integrating external threat intelligence feeds.
  • Relevant certifications (e.g., GCIH, GCFA).

No forms. Your profile is generated instantly.

Job Type: Remote

Salary: Not Disclosed

Experience: Entry

Duration: Months

Share this job:

Similar Jobs

Payroll Risk Lead

Posted 59 days ago

Lead global payroll risk and incident programs.

Drive improvements in risk posture and incident resolution.

Compliance Cross-Functional Collaboration Data Analysis Governance Frameworks

Revenue Operations Associate

Posted 59 days ago

Manage CRM workflows and data integrations.

Build data enrichment and prospecting workflows.

A/B Testing Clay CRM Management Data Enrichment

Payroll Incident Lead

Posted 59 days ago

Lead global payroll risk and incident management programs.

Enhance risk posture and resolve high-impact incidents.

Compliance Cross-Functional Leadership Data-Driven Solutions Incident Response

Payments Platform Manager

Posted 59 days ago

Own the roadmap for payments platform components.

Build core payment infrastructure and APIs.

APIs Card Networks Compliance Incident Response

Product Security Engineer

Posted 57 days ago

Perform comprehensive product security reviews.

Act as a security SME for architecture.

Cloud Security Go Incident Response Java

Product Security Engineer

Posted 57 days ago

Perform full-scope product security reviews.

Act as a security SME for architecture.

Cloud Security Go Incident Response Java

Customer Security Director

Posted 57 days ago

Serve as the primary security representative in customer engagements.

Drive technical security discussions addressing customer concerns.

Application Security Cloud Security Compliance Encryption

Trust & Safety Specialist

Posted 57 days ago

Investigate reported violations of house rules.

Coordinate incident response across functions.

Communication Skills Critical Thinking Customer Service Data Analysis

Trust & Safety Specialist

Posted 57 days ago

Investigate violations of house rules.

Coordinate cross-functional incident responses.

Active Listening Clear Communication Customer Support De-escalation Techniques

Customer Security Director

Posted 57 days ago

Represent security in customer engagements.

Articulate security architecture and risk management.

Application Security Cloud Security Compliance Encryption

Red Team Security Engineer

Posted 56 days ago

Devise and execute multi-stage attack campaigns.

Identify and exploit vulnerabilities across various domains.

Application Security Burp Suite Cobalt Strike Metasploit

Security Operations Manager

Posted 56 days ago

Monitor and escalate security alerts.

Lead responses to cybersecurity incidents.

Azure Security Cybersecurity Management Forensics Analysis Incident Response

Financial Data Quality Lead

Posted 56 days ago

Ensure financial data accuracy.

Lead a team of engineers.

Data Consolidation Data Lineage Data Modeling Data Quality Monitoring

Senior Software Engineer

Posted 53 days ago

Deliver infrastructure projects end-to-end.

Build platform primitives for deployment and debugging.

AI-assisted Development AWS Disaster Recovery Google Cloud Platform

Cyber Security Engineer

Posted 53 days ago

Plan and execute independent security projects.

Manage and audit identity provider solutions.

Configuration Management DLP EDR Entra

AI-Native Software Engineer

Posted 52 days ago

Design and build APIs/services for specific user groups.

Collaborate with AI to enhance development processes.

Agile Methodologies APIs AWS Cloud Development

Security & Infrastructure Lead

Posted 52 days ago

Lead security and infrastructure strategy.

Manage and develop security teams.

AWS CI/CD Cloud Infrastructure Container Orchestration

Security Engineer, Application Security

Posted 52 days ago

Design systems to detect security risks early.

Collaborate with teams to review designs.

Application Security Automated Checks Go Incident Response

Software Engineering Manager

Posted 52 days ago

Lead the design and delivery of web applications.

Provide technical leadership and mentorship to engineering teams.

Agile/Scrum AWS (Compute Storage Networking)

SOC Team Lead

Posted 52 days ago

Lead SOC team on-site for government contract.

Oversee security operations and incident response activities.

CISSP Clearance Management Compliance Governance

SOC Watch Officer

Posted 52 days ago

On-site position in Chandler, AZ.

Requires active Secret clearance.

CASP CCSP GCIA GCIH

Senior IT Security Engineer

Posted 52 days ago

Manage ISO 27001 and SOC 2 audits.

Coordinate audit activities for SaaS certification.

GRC Platforms IAM Incident Response ISO 27001

Trust & Safety Specialist

Posted 52 days ago

Investigate and resolve reported violations.

Coordinate incident response across departments.

Critical Thinking Cross-Functional Coordination Customer Support Data Analysis

Senior Security Engineer

Posted 51 days ago

Research threat actors and campaigns.

Design intelligence collection mechanisms.

Adversary Behavior Analysis Analytical Skills Cloud Security EDR

Senior Site Reliability Engineer

Posted 51 days ago

Manage and respond to system incidents.

Enhance monitoring and logging systems.

Automation AWS Clickhouse Incident Response

Software Engineering Manager

Posted 51 days ago

Lead the design and development of web applications.

Provide technical leadership through reviews and architecture decisions.

Agile/Scrum AWS (Compute Storage Networking)

OT Threat Hunting Manager

Posted 50 days ago

Lead and mentor an OT threat hunting team.

Manage OT Watch and OT Watch Complete operations.

Behavioral Detection Cyber Defense Detection Engineering Incident Response

AI-Enabled DevOps Engineer

Posted 50 days ago

Implement and maintain cloud infrastructure with IaC.

Improve CI/CD pipelines for applications and ML workloads.

Bash CI/CD Pipelines Cloud Infrastructure DevOps

Trust & Safety Specialist

Posted 50 days ago

Investigate reported violations of house rules.

Coordinate incident response with cross-functional teams.

Communication Skills Critical Thinking Customer Support Data Analysis

Software Engineering Manager

Posted 50 days ago

Lead the design and development of web applications.

Provide technical leadership and architecture guidance.

Agile/Scrum AWS Cloud-Native Design Distributed Systems

Associate Principal Pen Tester

Posted 49 days ago

Lead customer-facing penetration testing engagements.

Shape strategy aligning tech execution with business goals.

Adversary Emulation Burp Suite Pro Cobalt Strike Kali Linux

Security Compliance Manager

Posted 48 days ago

Develop and manage compliance programs.

Stay updated on laws and regulations.

IAM Incident Response ISO Framework ITIL Framework

Incident Response Manager

Posted 48 days ago

Manage daily operations of the Detection & Incident Response team.

Lead and optimize SIEM and SOAR functionalities.

Alert Tuning Automation Cloud Security (AWS/GCP) Detection Engineering

Application Security Engineer

Posted 46 days ago

Conduct security assessments and code audits.

Define security priorities and hiring plans.

Application Security Cloud Computing Incident Response Mentoring

Senior Security Engineer

Posted 46 days ago

Hire a Senior Security Operations Engineer.

Offer a remote work opportunity in Poland.

Cloud Security Compliance Standards Incident Response Network Security

Software Engineering Manager

Posted 46 days ago

Lead the design and development of web applications.

Provide technical leadership and ensure system reliability.

Agile/Scrum AWS Distributed Systems Generative AI Tools

Ecosystem Product Security Director

Posted 45 days ago

Define and lead security strategy for the Stellar ecosystem.

Raise security standards for wallets and infrastructure providers.

Blockchain Security Cross-Functional Collaboration Incident Response Infrastructure Security

Senior Site Reliability Engineer

Posted 43 days ago

Own the reliability and security of production apps.

Lead incident response and blameless postmortems.

CI/CD Pipelines Grafana Incident Response Kubernetes

Software Engineering Manager

Posted 43 days ago

Lead the design and development of web applications.

Provide technical leadership and code reviews.

Agile/Scrum Methodologies AWS Cloud-Native Design Distributed Systems

Senior Security Engineer

Posted 43 days ago

Lead vulnerability management across various platforms.

Build and mature SIEM/XDR capabilities.

Alert Tuning AWS Security CI/CD Hardening Container Security

Senior Site Reliability Engineer

Posted 43 days ago

Ensure the reliability and performance of the data platform.

Design and operate multi-region systems with high uptime.

Argo CD CI/CD Containerized Services Geo-replication

Security Infrastructure Engineer

Posted 43 days ago

Lead security infrastructure initiatives across cloud and applications.

Manage vulnerability detection and incident response.

AWS Security Cloud Security Architecture Container Security Dependency Management

Control Plane Software Engineer

Posted 43 days ago

Build and enhance the CTRL control plane.

Improve reliability and scalability of core services.

AWS Cloud Platforms Distributed Systems Docker

Security Infrastructure Engineer

Posted 43 days ago

Lead vulnerability management across infra and apps.

Build and mature SIEM/XDR capabilities.

AWS Cloud Security Container Security Incident Response

Senior Security Engineer

Posted 43 days ago

Strengthen overall security posture.

Manage vulnerability detection and response.

AWS Cloud Security Detection Engineering Incident Response

Senior Security Engineer

Posted 43 days ago

Lead vulnerability management across infrastructure.

Enhance SIEM/XDR capabilities for better detection.

AWS Security CI/CD Hardening Container Security Tools Incident Response

Privacy-Focused Software Engineer

Posted 42 days ago

Design and implement privacy-focused software.

Translate privacy policies into technical safeguards.

AWS Cloud Infrastructure Data Security Go

Senior Security Analyst

Posted 42 days ago

Lead and manage vulnerability management and pentesting.

Collaborate with cross-functional teams to enhance security compliance.

API Integrations Application Security Tooling Bug Bounty Programs Cloud Security (AWS

Risk-Based Alerting PM

Posted 42 days ago

Define the product vision for Risk-Based Alerting.

Improve signal quality and reduce alert fatigue.

Behavioral Analysis Cross-Functional Collaboration Data-Driven Decision Making Detection Engineering

Security Engineer Role

Posted 42 days ago

Safeguard customers through security engineering.

Enhance SOC capabilities with technology and processes.

Docker KQL (Kusto Query Language) Kubernetes Lucene