C

Cylake

AI-powered on-prem security platform for government

Security Researcher - Detection Systems

Security Operations & Incident ResponseConfirmed live in the last 24 hours
Full-timeSunnyvale, CA, USA$150k - $250k /yrIn-person

About the Job

Requirements

  • At least five years of experience building large-scale threat analysis and detection solutions across one or more of security logs, malware, network traffic, web pages, vulnerability exploitation, or a Ph.D. in Computer Science, System/Network Security, or a related technical field.
  • Deep expertise in one or more of threat hunting, malware analysis and sandboxing, vulnerability analysis, reverse engineering, offensive security, or penetration testing.
  • Deep understanding of modern attacks and evasion techniques, malware behaviors and countermeasures, the MITRE ATT&CK framework, and the cyber kill chain and tactics, techniques, and procedures.
  • Strong proficiency in Python programming.
  • Strong communication and documentation skills.

Responsibilities

  • Develop advanced threat detection capabilities for the next-generation security operations platform.
  • Research emerging threats, adversary tactics, and sophisticated attack techniques to design and implement end-to-end detection coverage.
  • Build and enhance research systems focused on threat analysis, advanced persistent threat simulation, cyber threat intelligence, and security knowledge graphs.
  • Partner with data scientists to develop agentic artificial intelligence workflows, security-focused models, and training datasets for cybersecurity use cases.

Desired Qualifications

  • Participation in Capture the Flag competitions, contributions to open-source security projects, vulnerability disclosures (CVEs), attack campaign research, technical blogs, or security research publications and presentations.
  • Experience working as a security operations center analyst, detection engineer, red team or blue team member, or security researcher in large-scale enterprise environments.
  • Deep understanding of modern operating system internals, system APIs, and security products such as endpoint detection and response, extended detection and response, security operations center platforms, firewalls, intrusion detection and prevention systems, or related security technologies.
  • Familiarity with cyber threat intelligence, attack causality analysis, provenance-based intrusion detection systems, and advanced threat detection methodologies.
  • Experience developing machine learning models for security detection use cases and applying large language models or agentic artificial intelligence to accelerate security research, analysis, and detection workflows.
  • System programming experience with C, C++, Rust, or Go.

About the Company

Cylake

AI-powered on-prem security platform for government

Cylake builds an AI-native security platform designed for government agencies and highly regulated enterprises that cannot use public cloud. It provides on-premises and private-cloud appliances that collect enterprise data into a single data lake to support detection, investigation, and AI-powered workflows without phoning home. The platform is operated entirely within customers’ environments, using local data storage and processing to maintain control and compliance. Cylake differentiates itself through deep government/regulated focus, a leadership team with experience from Palo Alto Networks and SentinelOne, and a cloud-free approach that keeps data and analytics inside customer premises. The company aims to reach beta in late 2026 and general availability in 2027, backed by significant venture funding to develop the platform and expand the team.

Company size
11-50
Company stage
N/A
Total funding
$290M
Headquarters
Sunnyvale, CA
Founded
2026

Recently Posted Jobs

Explore more opportunities at Cylake

See more jobs