Principal Security Researcher - EDR (Windows)

The role

The Principal Product Researcher will build and implement solutions to counter evolving threats. This role involves developing cross-platform features and sensor capabilities to detect Windows OS threats.

What you will do

• Identify innovative ways to detect Windows OS threats
• Develop cross-platform features leveraging telemetry from OS subsystems
• Research and develop sensor capabilities for Windows OS versions
• Work with engineering and detection teams to implement detection logic
• Identify and evaluate new telemetry opportunities
• Identify and address gaps in product coverage
• Respond to product escalations
• Perform False Positive and False Negative investigations
• Lead product research initiatives for security product strategies
• Coordinate with Product and Engineering teams to operationalize solutions

Required qualifications

• Expert in Windows OS internals, components, APIs, and design
• Prior experience with Windows OS kernel coding and device drivers
• Experience testing EDRs, bypasses, and evasion techniques
• Comfortable with reverse engineering and using debuggers
• Proficiency in multiple programming/scripting languages, such as C/C++/C#, PowerShell, and Python
• Applies AI to improve research quality, speed, and outputs in day-to-day work
• Commitment to clear documentation of research findings
• Experience with MITRE ATT&CK matrix, SIGMA, Yara, and Elasticsearch/Kibana

Nice to have

• Experience managing, deploying, and securing SMB environments utilizing a wide variety of security software, best practices, and automation tools
• Familiarity with product management
• Familiarity with incident response
• Familiarity with social engineering
• Familiarity with psychology
• Familiarity with education
• Familiarity with managed service provider tools

Benefits

• 100% remote work environment
• Generous paid time off policy, including vacation, sick time, and paid holidays
• 12 weeks of paid parental leave
• Medical, dental, and vision benefits plans
• 401(k) with a 5% contribution regardless of employee contribution
• Life and Disability insurance plans
• Stock options for all full-time employees
• One-time $500 reimbursement for building/upgrading home office
• Annual allowance for education and professional development assistance
• $75 USD/month digital reimbursement
• Access to the BetterUp platform for coaching, personal, and professional growth

Before you apply

• By submitting your application, you acknowledge the use of AI in the recruitment process

About the company

Founded in 2015 by former NSA cyber operators, Huntress is a remote-first team working to make enterprise-grade cybersecurity accessible to businesses of all sizes.