Security Researcher | Defender Experts
Core
Apply attacker methodology frameworks to investigate identity-centric threats, credential misuse, and cloud-based attacks, correlating datasets to uncover root causes and deliver customer-facing investigation summaries.
Role type
Senior IC security researcher (defensive/offensive)
Builds
Investigation summaries and threat analysis for customers
Domain
Cybersecurity, cloud security, identity security
Required skills
MITRE ATT&CK, Cyber Kill Chain, Kusto Query Language (KQL), threat analysis, anomaly detection, OS internals (Windows/Linux/Mac), cloud telemetry analysis, identity attack patterns (OAuth, Kerberos, NTLM), offensive security (Metasploit, OSINT), critical thinking, pattern recognition
Preferred skills
Experience with human-operated ransomware, Business Email Compromise (BEC), stealthy persistence campaigns, Tier-2/3 analyst validation
Technologies
Azure, AWS, GCP, Metasploit, KQL
Responsibilities
Investigate identity centric threats, credential misuse, and lateral movement; Correlate large datasets using KQL to uncover relationships and root cause; Differentiate benign, suspicious, and malicious activity; Deliver customer facing investigation summaries; Investigate cloud environments and associated network telemetry; Perform investigations involving identity misuse and authentication anomalies; Execute offensive security tasks including exploit development and OSINT
Seniority
Senior, hands-on IC
