Principal Security Researcher – EDR, Windows

This is a fully remote position, open to applicants in United States.

📋 Description

• Discover creative methods for identifying threats within the Windows operating system.

• Create cross-platform functionalities utilizing telemetry from file systems, memory, processes, and networks.

• Investigate and develop sensor capabilities to enhance visibility and detection across various supported versions of Windows OS.

• Work collaboratively with engineering and detection teams to implement effective detection logic.

• Identify and assess new telemetry opportunities.

• Recognize and resolve gaps in product coverage.

• Address product escalations effectively.

• Conduct investigations into false positives and false negatives.

• Lead research initiatives focused on evaluating strategies and technologies for security products.

• Coordinate with Product and Engineering teams to integrate and operationalize Threat Operations solutions.

• Leverage AI for information gathering, analysis, prototyping, and creating decision-useful work products.

• Develop reusable prompts, templates, and workflows for ongoing research tasks.

• Create technical documentation intended for customers and related teams.

• Provide mentorship and share technical expertise.

• Advocate for Huntress through media engagements, public speaking, CFPs, CTFs, and blogging.

⛳️ Requirements

• In-depth knowledge of Windows OS internals, components, APIs, and design.

• Previous experience in Windows OS kernel programming and device drivers.

• Familiarity with testing EDRs, bypass methods, and evasion techniques.

• Proficiency in reverse engineering and using debuggers.

• Skilled in multiple programming and scripting languages, including C/C++/C#, PowerShell, and Python.

• Utilizes AI to enhance the quality, speed, and outcomes of research in daily tasks.

• Strong commitment to thorough documentation of research outcomes.

• Knowledge of MITRE ATT&CK matrix, SIGMA, Yara, and Elasticsearch/Kibana.

• Experience in managing, deploying, and securing SMB environments with security software, best practices, and automation tools.

• Familiarity with product management, incident response, social engineering, psychology, education, and MSP tools is a valuable differentiator.

🏝️ Benefits

• Fully remote work environment.

• Generous paid time off policy, which includes vacation, sick leave, and paid holidays.

• 12 weeks of paid parental leave.

• Highly competitive and comprehensive medical, dental, and vision benefit plans.

• 401(k) plan with a 5% contribution, regardless of employee contribution.

• Life and Disability insurance coverage.

• Stock options available for all full-time employees.

• One-time reimbursement of $500 for setting up or upgrading a home office.

• Annual allowance for education and professional development support.

• Monthly digital reimbursement of $75 USD.

• Access to the BetterUp platform for coaching, personal, and professional growth.

• Bonus and equity options in addition to base salary.