Senior AI Threat Researcher

This is a fully remote position, open to applicants in Canada.

📋 Description

• Investigate how threat actors are utilizing AI throughout the attack lifecycle, including: AI-assisted social engineering, AI-generated malware, automated reconnaissance, and adversarial assaults on ML-based defenses.

• Examine real-world threats to agentic AI systems, AI supply chains, and enterprise AI implementations, evaluating risks and formulating detection strategies.

• Assist in the instrumentation and fine-tuning of telemetry to detect indicators of AI-driven attacker behavior on a large scale.

• Analyze global telemetry, case data, and OSINT to highlight emerging AI-related threat trends and early-warning signals.

• Identify chances to automate repetitive research and reporting processes using LLMs, scripting, and internal tools.

• Collaborate closely with CTU researchers, SophosLabs analysts, MDR threat hunters, data scientists, and engineering teams to integrate findings into distinctive reports with actionable insights.

• Generate high-quality written intelligence outputs, including in-depth research, rapid assessments, and strategic forecasts.

⛳️ Requirements

• Capability to interpret data from various telemetry sources and convert it into actionable intelligence.

• Outstanding written communication abilities appropriate for both technical and executive audiences.

• Proven experience in at least two of the following areas: threat intelligence, malware analysis, detection engineering, or AI/ML research.

• Comprehensive understanding of threat actor ecosystems, contemporary attack methods, and the MITRE ATT&CK framework.

• Practical proficiency with Python and modern AI development practices, including the creation and orchestration of multi-agent systems, working with LLM APIs, and designing agentic workflows with sub-agents, tool usage, and retrieval-augmented generation.

• Experience in building or utilizing automation tools to enhance analytical or reporting workflows.

🏝️ Benefits

• Sophos follows a remote-first working model, making remote work the primary option for the majority of employees.

• Employee-led diversity and inclusion networks that foster community and provide education and advocacy.

• Annual charity and fundraising initiatives along with volunteer days for employees to engage with local communities.

• Global employee sustainability initiatives aimed at minimizing our environmental impact.

• Global fitness and trivia competitions to keep our bodies and minds active.

• Global well-being days for employees to unwind and recharge.

• Monthly well-being webinars and training sessions to support employee health and wellness.