Senior Threat Researcher Endpoint/Cloud - Detections

Responsibilities

• Develop and maintain high-quality custom detection rules across endpoint, cloud, and network environments
• Research emerging threats, attack techniques, and telemetry sources to improve detection coverage
• Design and continuously improve anomaly-based and behavioral-based detections
• Conduct code reviews and troubleshoot existing detection and signature codebases
• Collaborate with engineering and security operations teams to tune detection capabilities and reduce false positives
• Build runbooks, documentation, and research reports to support detection surfaces
• Participate in the full software development life cycle to build secure and maintainable detection content

Requirements

• 6+ years of experience authoring and maintaining security detections
• Strong expertise in endpoint, cloud, or network detection and signature development
• Proven experience with anomaly-based and behavioral-based detections
• Deep knowledge of networking protocols including TCP/IP, DNS, LDAP, and NTLM
• Experience using MITRE ATT&CK, packet capture analysis, and threat intelligence to drive development
• Experience working within Managed Detection and Response (MDR) environments

Preferred Qualifications

• Experience developing SIEM, EDR, or cloud security detections
• Proficiency in programming languages such as Python, Go, Java, or C++
• Experience authoring Sigma and YARA rules
• Knowledge of DevOps practices, automation frameworks, and Test Driven Development (TDD)
• Experience with cloud platforms (AWS, Azure, GCP) and container technologies like Kubernetes
• Familiarity with open-source tools such as Zeek or Suricata

Benefits

• Equity for all employees
• Flexible annual leave, paid holidays, and volunteer days
• Comprehensive private benefits plan including medical, life, and personal accident insurance
• Training and career development programs
• Fertility support and paid parental leave

About the Company

Arctic Wolf is a leader in security operations, dedicated to the mission of ending cyber risk. We build award-winning technology, such as our Aurora Platform, to protect organizations worldwide through innovation and expert research.