About the Role
Design and Develop: Contribute to the design and development of our automated security research and detection pipelines, driving core automation functionality, threat ingestion workflows, and detection tooling from concept through production.
End-to-End Ownership: Take ownership of pipeline features and components, from initial design and development through rigorous testing, false-positive validation, automation, and ongoing operational health.
Detection Pipeline Development: Build, iterate on, and harden automated threat analysis and detection generation workflows, including automated sample triage, behavioral indicator extraction, and rule deployment across security engines.
Deliver Quality: Ensure automated detection rules and pipeline services are delivered on time and to the highest quality standards, meeting research goals and protection commitments.
Resilience and Performance: Implement best practices for pipeline resilience, scalability, and performance across high-volume threat telemetry and sample processing systems.
Observability and Telemetry: Build and maintain operational instrumentation, logging, and dashboards to monitor pipeline throughput, detection efficacy, and system health.
About You
Experience: 0–2+ years of experience (including internships, university research, or strong academic/personal projects; fresh graduates in Computer Science, Cybersecurity, Software Engineering, or related fields are strongly encouraged to apply) in Python or backend software development, with a strong interest in security research and automation.
Operating Systems: Solid understanding of Linux and/or Windows operating system fundamentals and internals is a must.
Security & Detection Knowledge
Foundational understanding of cybersecurity concepts, malware behavior, common vulnerabilities (CVEs, OWASP), and threat analysis.
Familiarity with threat detection mechanisms and rule formats (such as YARA, Sigma, Snort, or behavioral signatures).
Exposure to static/dynamic malware analysis, sandboxes (e.g., Cuckoo/CAPE), or reverse engineering tools (Ghidra, IDA) through coursework or CTFs.
Core Development Skills
Excellent development and debugging skills in Python (or Go / C++).
Strong grasp of data structures, algorithms, and software design patterns.
CI/CD pipeline experience (Git, GitHub Actions, or equivalent).
Strong written communication for technical documentation and async collaboration.
Ability to learn quickly and operate effectively in a fast-moving environment.
AI/ML & Automation Knowledge
Hands-on experimentation with Large Language Models (LLMs) and agentic workflows.
Databases & Data Pipelines
SQL / Relational databases such as Postgres or MySQL.
Services & Tools
Cloud services familiarity (AWS or GCP).
Logging, telemetry, and monitoring tools.
Domain Knowledge
Passion for threat intelligence, automated detection engineering, and scaling security research through software.
Soft Skills
Excellent communication and collaboration skills with the ability to work effectively across engineering, product, and security research teams.
Ability to communicate technical concepts clearly to both engineering and research stakeholders.
Strong analytical mindset, high coachability, and curiosity for solving complex security challenges through code.
