Principal Product Researcher - EDR (Windows)
Core
Design and implement detection logic for Windows OS threats using telemetry from file system, memory, process, and network activity to counter evolving cyber threats.
Role type
Principal Product Researcher (Windows EDR)
Builds
Detection capabilities, sensor capabilities, and cross-platform features for enterprise-grade cybersecurity platforms.
Domain
Cybersecurity / Endpoint Detection and Response (EDR) / Windows OS internals
Deliverable
production ML models | product features
Required skills
Windows OS internals expertise, kernel coding and device drivers, reverse engineering, debugging, C/C++/C#/PowerShell/Python, MITRE ATT&CK matrix, SIGMA, Yara, Elasticsearch/Kibana, AI application for research
Preferred skills
Experience testing EDRs and evasion techniques, product management, incident response, social engineering, psychology, education, managed service provider tools
Technologies
C, C++, C#, PowerShell, Python, Elasticsearch, Kibana, Yara, SIGMA, MITRE ATT&CK
Responsibilities
Identify innovative ways to detect Windows OS threats, develop cross-platform features leveraging OS telemetry, research and develop sensor capabilities, work with engineering teams to implement detection logic, identify and evaluate new telemetry opportunities, perform False Positive and False Negative investigations, lead product research initiatives, apply AI to improve research speed and quality, develop technical documentation, mentor technical expertise, promote company reputation through media and public speaking
Seniority
Principal, hands-on IC with strategy & mentorship
