Associate Security Researcher

Job Title:

Associate Security Researcher

About Trellix  
Trellix is a global cybersecurity leader helping organizations build cyber resilience for the AI era. Combining AI-native security, operational threat intelligence, and automated detection and response, Trellix provides defense-grade protection at machine speed across on-premises, air-gapped, operational technology, hybrid, and cloud environments. Trellix helps customers anticipate threats, scale effective security operations, maintain business continuity, and adapt their security posture for the modern threat landscape. Working with a broad partner ecosystem and global intelligence collaborators, Trellix helps strengthen the collective defense against cybercriminals and state-sponsored attacks. At Trellix, we empower professionals at all career stages to expand their technical expertise, lead strategic initiatives, and make a tangible global impact. Whether you are an industry pioneer or an emerging specialist, Trellix provides the tools and opportunities to enhance and expand your skill set. Join our mission to scale AI-driven cyber defense alongside an AI-accelerated threat landscape, and help build a safer, more resilient future. More at https://trellix.com.

Role Overview:

Responsible for secure design, development and operation of 's hardware and software products and services. Responsibilities may include threat assessment, design of security components, vulnerability assessment. Ensures products conform to standards and specifications. Develops plans and cost estimates and assesses projects to analyze risks. Responds to customer/client requests or events as they occur. Develops solutions to problems utilizing formal education, judgment and formal process. Maintains substantial knowledge of state-of-the-art security principles, theories, attacks and contributes to literate and conferences. May participate in development or lectual property. Require thorough knowledge of security practices, procedures and capabilities in order to perform non-repetitive, analytical work.

About the Role

• Design and Develop: Contribute to the design and development of our automated security research and detection pipelines, driving core automation functionality, threat ingestion workflows, and detection tooling from concept through production.
• End-to-End Ownership: Take ownership of pipeline features and components, from initial design and development through rigorous testing, false-positive validation, automation, and ongoing operational health.
• Detection Pipeline Development: Build, iterate on, and harden automated threat analysis and detection generation workflows, including automated sample triage, behavioral indicator extraction, and rule deployment across security engines.
• Deliver Quality: Ensure automated detection rules and pipeline services are delivered on time and to the highest quality standards, meeting research goals and protection commitments.
• Resilience and Performance: Implement best practices for pipeline resilience, scalability, and performance across high-volume threat telemetry and sample processing systems.
• Observability and Telemetry: Build and maintain operational instrumentation, logging, and dashboards to monitor pipeline throughput, detection efficacy, and system health.
  

About You

• Experience: 0–2+ years of experience (fresh graduates in Computer Science, Cybersecurity, Software Engineering, or related fields are strongly encouraged to apply) in Python or backend software development, with a strong interest in security research and automation.
• Operating Systems: Solid understanding of Linux and/or Windows operating system fundamentals and internals is a must.
• Security & Detection Knowledge:
  • Foundational understanding of cybersecurity concepts, malware behavior, common vulnerabilities (CVEs, OWASP), and threat analysis.
  • Familiarity with threat detection mechanisms and rule formats (such as YARA, Sigma, Snort, or behavioral signatures).
  • Exposure to static/dynamic malware analysis, sandboxes (e.g., Cuckoo/CAPE), or reverse engineering tools (Ghidra, IDA) through coursework or CTFs.
• Core Development Skills:
  • Excellent development and debugging skills in Python (or Go / C++).
  • Strong grasp of data structures, algorithms, and software design patterns.
  • CI/CD pipeline experience (Git, GitHub Actions, or equivalent).
  • Strong written communication for technical documentation and async collaboration.
  • Ability to learn quickly and operate effectively in a fast-moving environment.
• AI/ML & Automation Knowledge: 
  • Hands-on experimentation with Large Language Models (LLMs) and agentic workflows.
• Databases & Data Pipelines: 
  • SQL / Relational databases such as Postgres or MySQL.
• Services & Tools:
  • Cloud services familiarity (AWS or GCP).
  • Logging, telemetry, and monitoring tools.
• Domain Knowledge: 
  • Passion for threat intelligence, automated detection engineering, and scaling security research through software.
• Soft Skills:
  • Excellent communication and collaboration skills with the ability to work effectively across engineering, product, and security research teams.
  • Ability to communicate technical concepts clearly to both engineering and research stakeholders.
  • Strong analytical mindset, high coachability, and curiosity for solving complex security challenges through code.

Company Benefits and Perks:

We believe that the best solutions are developed by teams who embrace each other's unique experiences, skills, and abilities. We work hard to create a dynamic workforce where we encourage everyone to bring their authentic selves to work every day. We offer a variety of social programs, flexible work hours and family-friendly benefits to all of our employees.

• Retirement Plans

• Medical, Dental and Vision Coverage

• Paid Time Off

• Paid Parental Leave

• Support for Community Involvement

We're serious about our commitment to a workplace where everyone can thrive and contribute to our industry-leading products and customer support, which is why we prohibit discrimination and harassment based on race, color, religion, gender, national origin, age, disability, veteran status, marital status, pregnancy, gender expression or identity, sexual orientation or any other legally protected status.

Our Commitment to You:

At Trellix, we are committed to creating a safe and trustworthy experience for our customers, employees, and candidates. Please be aware that fraudulent recruiting activity can occur through fake job postings or impersonated communications.

Trellix conducts interviews through professional channels only and does not use text messages, instant messaging, or group chats for interviews. We will never request sensitive personal information—such as your date of birth, Social Security number, or national ID number—during the interview process.

Trellix also does not require candidates to pay fees, purchase products or services, or process payments of any kind as part of the recruiting or hiring process. And Trellix will never keep any original work authorization documents that we may be required to review during the hiring process.

If you have questions or believe you may have encountered fraudulent activity related to Trellix recruiting, please contact us at[email protected].