Principal Product Researcher

Job Summary

Seeking a Principal Product Researcher to work remotely in a full-time capacity, who will identify innovative methods to detect Windows OS threats, develop cross-platform features, and collaborate with internal teams to enhance security solutions.

Key responsibilities:

• Identify innovative ways to detect Windows OS threats and develop cross-platform features leveraging telemetry from common OS subsystems
• Research and develop sensor capabilities to enhance visibility and detection support for attack techniques across supported Windows OS versions
• Collaborate with engineering and detection teams to implement detection logic and address product coverage gaps

Required qualifications:

• Expertise in Windows OS internals, components, APIs, and design
• Prior experience with Windows OS kernel coding and device drivers
• Experience testing EDRs, bypasses, and evasion techniques
• Proficiency in multiple programming/scripting languages, including C/C++/C#, PowerShell, and Python
• Familiarity with the MITRE ATT&CK matrix, SIGMA, Yara, and Elasticsearch/Kibana