Principal Product Researcher - EDR (Windows)

📋 Description

• Identify innovative ways to detect Windows OS threats
• Develop cross-platform features using telemetry from OS subsystems (files, memory, network)
• Research sensor capabilities for visibility and detection across Windows OS versions
• Collaborate with internal engineering and detection teams to implement detection logic
• Identify and evaluate new telemetry opportunities
• Coordinate with Product and Engineering to operationalize Threat Operations solutions

🎯 Requirements

• Expert in Windows OS internals, components, APIs
• Windows kernel coding and device drivers experience
• Experience testing EDRs, bypasses, and evasion techniques
• Proficiency in C/C++/C#, PowerShell, and Python
• Applies AI to improve research speed, quality, outputs
• MITRE ATT&CK, Sigma, YARA, Elasticsearch/Kibana familiarity

🎁 Benefits

• 100% remote work environment
• Generous paid time off including vacation, sick time, and holidays
• 12 weeks of paid parental leave
• Medical, dental, and vision benefits
• 401(k) with 5% company contribution
• Stock options for all full-time employees