Senior/Principal Security Researcher - Windows EDR (Cortex - XDR)
Core
Create statistics-based classification algorithms to detect new malware, process behavior anomalies, and attackers in enterprise networks using data from multiple Windows endpoints.
Role type
Senior/Principal Security Researcher (Windows EDR)
Builds
Analytics detection capabilities for Windows EDR behavioral detection
Domain
Cybersecurity / Malware Research / Windows OS
Deliverable
production ML models
Required skills
Windows OS internals, Endpoint attack methods, Malware research/development, Python, Statistical algorithms, Large database querying
Preferred skills
Machine learning, Data analysis, Reverse engineering, Microsoft AD infrastructure, Exploitation
Technologies
Python, Windows, Large databases
Responsibilities
Research new detection methods for attack techniques, Develop statistical algorithms for analytics detection, Improve collection modules for detection quality, Simulate attacks and analyze behavior, Stay updated on APTs and attacker TTPs
Seniority
Senior/Principal, hands-on IC