Security Researcher

📋 Description

• Research attacker tradecraft against live cloud workloads (compute, containers, Kubernetes, serverless)
• Analyze telemetry from CloudTrail, GCP Audit Logs, Azure Activity Logs, to inform detections
• Partner with sensor and detection engineers on feasibility, coverage, signal quality
• Run threat simulations and attack emulation to validate coverage and surface gaps
• Track emerging threats and CVEs across AWS/Azure/GCP to set detection priorities
• Produce publishable research and represent Orca at conferences and webinars

🎯 Requirements

• 4+ years in security or threat research, ideally in cloud/cloud-native environments
• Strong Linux and cloud infrastructure foundation, with an attacker-oriented mindset
• Deep familiarity with attacker TTPs (MITRE ATT&CK for Cloud/Containers)
• Hands-on experience turning runtime, host, and network security events into detections
• Proficiency in Python (Go a plus)
• Strong written and spoken English, with the ability to explain complex topics clearly

🎁 Benefits

• eBPF/runtime sensor experience, Linux kernel internals
• Kubernetes/container, API, or application security background
• Offensive security, red teaming, or vulnerability research experience
• Large-scale telemetry analysis (SQL/Elastic)
• AI/ML-assisted security research experience
• Conference speaking, published research, CVEs, or open-source contributions