About the Role
Design and Develop: Contribute to the design and development of our automated security research and detection pipelines, driving core automation functionality, threat ingestion workflows, and detection tooling from concept through production.
End-to-End Ownership: Take ownership of pipeline features and components, from initial design and development through rigorous testing, false-positive validation, automation, and ongoing operational health.
Detection Pipeline Development: Build, iterate on, and harden automated threat analysis and detection generation workflows, including automated sample triage, behavioral indicator extraction, and rule deployment across security engines.
Deliver Quality: Ensure automated detection rules and pipeline services are delivered on time and to the highest quality standards, meeting research goals and protection commitments.
Resilience and Performance: Implement best practices for pipeline resilience, scalability, and performance across high-volume threat telemetry and sample processing systems.
Observability and Telemetry: Build and maintain operational instrumentation, logging, and dashboards to monitor pipeline throughput, detection efficacy, and system health.
About You
Experience: 0–2+ years of experience (fresh graduates in Computer Science, Cybersecurity, Software Engineering, or related fields are strongly encouraged to apply) in Python or backend software development, with a strong interest in security research and automation.
Operating Systems: Solid understanding of Linux and/or Windows operating system fundamentals and internals is a must.
Security & Detection Knowledge
Foundational understanding of cybersecurity concepts, malware behavior, common vulnerabilities (CVEs, OWASP), and threat analysis.
Familiarity with threat detection mechanisms and rule formats (such as YARA, Sigma, Snort, or behavioral signatures).
Exposure to static/dynamic malware analysis, sandboxes (e.g., Cuckoo/CAPE), or reverse engineering tools (Ghidra, IDA) through coursework or CTFs.
Core Development Skills
Excellent development and debugging skills in Python (or Go / C++).
Strong grasp of data structures, algorithms, and software design patterns.
CI/CD pipeline experience (Git, GitHub Actions, or equivalent).
Strong written communication for technical documentation and async collaboration.
Ability to learn quickly and operate effectively in a fast-moving environment.
AI/ML & Automation Knowledge
Hands-on experimentation with Large Language Models (LLMs) and agentic workflows.
Databases & Data Pipelines
SQL / Relational databases such as Postgres or MySQL.
Services & Tools
Cloud services familiarity (AWS or GCP).
Logging, telemetry, and monitoring tools.
Domain Knowledge
Passion for threat intelligence, automated detection engineering, and scaling security research through software.
Soft Skills
Excellent communication and collaboration skills with the ability to work effectively across engineering, product, and security research teams.
Ability to communicate technical concepts clearly to both engineering and research stakeholders.
Strong analytical mindset, high coachability, and curiosity for solving complex security challenges through code.
Company Benefits and Perks
We believe that the best solutions are developed by teams who embrace each other's unique experiences, skills, and abilities. We work hard to create a dynamic workforce where we encourage everyone to bring their authentic selves to work every day. We offer a variety of social programs, flexible work hours and family-friendly benefits to all of our employees.
Retirement Plans
Medical, Dental and Vision Coverage
Paid Time Off
Paid Parental Leave
Support for Community Involvement
We're serious about our commitment to a workplace where everyone can thrive and contribute to our industry-leading products and customer support, which is why we prohibit discrimination and harassment based on race, color, religion, gender, national origin, age, disability, veteran status, marital status, pregnancy, gender expression or identity, sexual orientation or any other legally protected status.
Our Commitment to You
At Trellix, we are committed to creating a safe and trustworthy experience for our customers, employees, and candidates. Please be aware that fraudulent recruiting activity can occur through fake job postings or impersonated communications.
Trellix conducts interviews through professional channels only and does not use text messages, instant messaging, or group chats for interviews. We will never request sensitive personal information—such as your date of birth, Social Security number, or national ID number—during the interview process.
Trellix also does not require candidates to pay fees, purchase products or services, or process payments of any kind as part of the recruiting or hiring process. And Trellix will never keep any original work authorization documents that we may be required to review during the hiring process.
If you have questions or believe you may have encountered fraudulent activity related to Trellix recruiting, please contact us at ethics@trellix.com.
