H

Huntress

Managed 24/7 EDR threat hunting

Principal Security Researcher - Endpoint Detection and Response, Windows

Security Operations & Incident ResponseConfirmed live in the last 24 hours
Full-timeRemote in USA

About the Job

Requirements

  • Expert knowledge of Windows operating system internals, components, application programming interfaces, and design.
  • Prior experience with Windows operating system kernel coding and device drivers.
  • Experience testing endpoint detection and response tools, bypasses, and evasion techniques.
  • Comfort with reverse engineering and using debuggers.
  • Proficiency in multiple programming or scripting languages, such as C, C++, C#, PowerShell, and Python.
  • Ability to apply artificial intelligence to improve research quality, speed, and outputs in day-to-day work.
  • Commitment to clearly documenting research findings.
  • Experience with the MITRE ATT&CK matrix, SIGMA, YARA, and Elasticsearch or Kibana.

Responsibilities

  • Identify innovative ways to detect Windows operating system threats.
  • Develop cross-platform features that use telemetry from common operating system subsystems, including file system, memory, process, and network activity.
  • Research and develop sensor capabilities that provide visibility and detection support for attack techniques across supported Windows operating system versions.
  • Collaborate with internal engineering and detection teams to implement detection logic.
  • Identify and evaluate new telemetry opportunities.
  • Identify and address gaps in product coverage.
  • Respond to product escalations.
  • Conduct false positive and false negative investigations.
  • Lead product research initiatives to develop and evaluate security product strategies and technologies.
  • Coordinate with Product and Engineering teams to integrate and operationalize solutions developed by Threat Operations teams.
  • Use artificial intelligence in day-to-day product research to improve the speed, quality, and impact of research outputs.
  • Use artificial intelligence to support information gathering, analysis, prototyping, and production of clear, decision-useful work products, while remaining accountable for the final output.
  • Build and reuse lightweight prompts, templates, or workflows for recurring research tasks rather than relying on one-off use.
  • Develop internal and external technical documentation to educate customers and communicate research findings to adjacent teams about security risks and opportunities.
  • Mentor and teach technical expertise to advance the broader community.
  • Promote Huntress’ reputation through media interaction, public speaking, calls for papers, capture-the-flag events, and blogs.

About the Company

Huntress

Managed 24/7 EDR threat hunting

Huntress delivers managed security services focused on endpoint detection and response (EDR) and proactive threat hunting. It continuously monitors client systems around the clock to detect cyber threats, particularly ransomware and other advanced attacks, and only raises alerts after analysts verify them. In addition to detection, Huntress provides security awareness training and educational resources to help clients improve cybersecurity practices. The service is designed to complement Microsoft 365 environments and emphasizes personalized reporting and strong customer support. The company’s goal is to help businesses defend against cyber threats with reliable, verified detections and practical guidance, reducing false positives and improving security posture.

Company size
1,001-5,000
Company stage
Series D
Total funding
$309.8M
Headquarters
Columbia, MD
Founded
2015

Recently Posted Jobs

Explore more opportunities at Huntress

See more jobs