Description

You will lead complex research initiatives to discover and develop techniques for detecting, analyzing, and preventing cyber attacks.

Responsibilities

• Lead in-depth research projects on emerging attack vectors, tactics, and techniques used by advanced threat actors.
• Develop novel detection methods for identifying cyber attacks and create mechanical advantage to uncover attacks.
• Partner with threat hunters, security contractors, and engineering teams on attack detection.
• Apply research findings to incidents to refine detection capabilities.
• Communicate complex research and actionable insights to an executive audience.

Required Skills

• Perform security testing using Mutation-based, Coverage-based, and Grammar-based fuzzing.
• Use fuzzing tools including AFL++, libFuzzer, Honggfuzz, and Sulley.
• Develop custom test harnesses for testing specific APIs or entry points at scale.
• Debug crashes and identify root causes within x86 and ARM environments.
• Create exploits based on crashes and demonstrate understanding of binary layouts and memory safety vulnerabilities.
• Implement container security escapes and hardening efforts.
• Analyze attacker tradecraft within cloud environments, specifically Entra, Azure, and M365.
• Program and script using Python.
• Query cloud data using Kusto.

Preferred Skills

• 15+ years of experience in software development lifecycle, large-scale computing, modeling, cybersecurity, or anomaly detection.
• Doctorate in Statistics, Mathematics, Computer Science, or a related field.
• Experience identifying malicious activity in detection systems at scale.
• Familiarity with graph analytic techniques and leveraging machine learning or statistical analysis to uncover stealthy threats.

Key Skills

Education

Any Graduate