Huntress Logo

Huntress

Principal Security Researcher, SIEM

Job Posted 7 Days Ago Posted 7 Days Ago
Easy Apply
Remote
Hiring Remotely in US
Expert/Leader
Easy Apply
Remote
Hiring Remotely in US
Expert/Leader
As a Principal Security Researcher, you will lead SIEM product strategies, ensuring accurate alerts and collaborating with teams to enhance cybersecurity for SMB clients.
The summary above was generated by AI

Reports to: Senior Manager, Product Research 

Location: Remote US

Compensation Range: $180,000 to $200,000 base plus bonus and equity


What We Do:

Huntress is a fully remote, global team of passionate experts and ethical badasses on a mission to break down the barriers to cybersecurity. Whether creating purpose-built security solutions, hunting down hackers, or impacting our community, our people go above and beyond to change the security game and make a real difference.

Founded in 2015 by former NSA cyber operators, Huntress protects all businesses—not just the 1%—with enterprise-grade, fully owned, and managed cybersecurity products at the price of an affordable SaaS application. The Huntress difference is our One Team advantage: our technology is designed with our industry-defining Security Operations Center (SOC) in mind and is never separated from our service.

We protect 3M+ endpoints and 1M+ identities worldwide, elevating underresourced IT teams with protection that works as hard as they do. As long as hackers keep hacking, Huntress keeps hunting.

What You’ll Do: 

Do you like getting into the weeds on all things technical, psychological, and educational and want to know how things work? Then this is the position for you. We are looking for that jack of all trades who brings broad experience to each challenge presented. The Huntress Security team has the unique honor of waking up every morning knowing we will make hackers regret targeting our partners and customers. As a Security Product Researcher, we’re looking for someone who wants to pour all of their creativity into building and implementing simple solutions that are disproportionately effective at countering these constantly evolving threats. Competitive candidates have experience managing, deploying, and securing SMB environments utilizing various security software, best practices, and automation tools. Familiarity with product management, incident response, social engineering, psychology, education, and managed service provider tools are additional ways to differentiate yourself.

As you can imagine, success doesn’t happen in a vacuum. An effective Security Researcher fosters highly collaborative environments between the Product, Engineering, and Security teams to accelerate our mission and secure the 99% of businesses that fall below the enterprise poverty line. This collaboration is needed to produce and prioritize a unified technical vision delivering our most impactful features and capabilities.

We defend over 2.5M endpoints across 33,000+ mid-sized and small business customers, and that number continues to grow each month. Considering this market’s tighter budget, it’s not financially possible to dedicate human analysts to each client. The Security Operations team addresses this challenge head-on by building and scaling highly automated efficiencies—often lightly augmented by our SOC — that make intruders earn every inch of their access while maintaining affordability and healthy gross margins.

Responsibilities:  

  • Lead the security Capabilities we bring to market, owning the layered defense strategy gained by combining multiple log sources
  • Define the value of a log. Not all log sources have equal security value, and not all logs from a single source hold the same value
  • You will lead the processing strategy for our SIEM product to extract maximum security value from the narrowest set of logs that distinguish between suspicious and malicious events to reach the highest accuracy true positive rate
  • Simulate attacks from SOC incidents, collecting, synthesizing, & combining relevant logs to generate custom detection logic, log aggregation, & security technologies that detect intrusions or misconfigurations derived from log analysis
  • Operationalize SIEM by translating security research from incident investigations and attack path testing into product outcomes
  • Perform independent research on attacks and convert findings into engineering requirements for new security capabilities
  • Innovate new detection correlation opportunities
  • Build capability & feature use cases that integrate needs from SOC analysts and Incident Response
  • Architect log source aggregation to ensure SIEM alerts are highly accurate. We strive for 99% accuracy for critical alerts
  • Partner with engineering to integrate disparate log sources into unified data schema
  • Own & nurture the cross-department relationships critical to successful product delivery & launch
  • Document research findings through technical write-ups, advisories, internal reports, blogs, CFPs & presentations
  • Proven organizational and program management skills, with a keen attention to detail and a sense of urgency to deliver an exceptional product under tight deadline pressures
  • Eagerness to engage, report, and be accountable to executive stakeholders
  • Passion to translate your expertise in nontechnical ways to deliver impactful security outcomes that protect the 99%
  • Promote Huntress’ reputation through media interaction, public speaking, and blogs
  • Educate the public on how to be security savvy in novel and fun ways

What You Bring To The Team: 

  • Expert in various multi-OS & multi-cloud vendor log types + how they can be used to surface attacker tradecraft
  • Proven track record building, deploying, and maturing SIEM technology (vendor agnostic, preferred)
  • Expert knowledge of SOC investigations, incident response and how to build security product requirements to combat threats
  • Expert in detection coverage gap analysis with a focus on MITRE ATT&CK
  • Expert at translating current trends in cyber security for both technical and non-technical audiences
  • Expert at translating MITRE TTPs to Customer value propositions
  • Expert at researching emerging tradecraft

What We Offer: 

  • 100% remote work environment - since our founding in 2015
  • Generous paid time off policy, including vacation, sick time, and paid holidays
  • 12 weeks of paid parental leave
  • Highly competitive and comprehensive medical, dental, and vision benefits plans 
  • 401(k) with a 5% contribution regardless of employee contribution
  • Life and Disability insurance plans
  • Stock options for all full-time employees 
  • One-time $500 reimbursement for building/upgrading home office
  • Annual allowance for education and professional development assistance 
  • $75 USD/month digital reimbursement
  • Access to the BetterUp platform for coaching, personal, and professional growth

  

Huntress is committed to creating a culture of inclusivity where every single member of our team is valued, has a voice, and is empowered to come to work every day just as they are. 

We do not discriminate based on race, ethnicity, color, ancestry, national origin, religion, sex, sexual orientation, gender identity, disability, veteran status, genetic information, marital status, or any other legally protected status.  

We do discriminate against hackers who try to exploit small businesses.

Accommodations: 

If you require reasonable accommodation to complete this application, interview, or pre-employment testing or participate in the employee selection process, please direct your inquiries to accommodations@huntresslabs.com. Please note that non-accommodation requests to this inbox will not receive a response. 

If you have questions about your personal data privacy at Huntress, please visit our privacy page.

#BI-Remote 

Top Skills

Automation Tools
Incident Response
Managed Service Provider Tools
Security Operations
SIEM

Similar Jobs at Huntress

12 Days Ago
Easy Apply
Remote
US
Easy Apply
Senior level
Senior level
Information Technology • Cybersecurity
The role involves researching threats, creating reports, collaborating with teams, and advocating for product enhancements to improve cybersecurity strategies.
Top Skills: AzureC/C++ElasticGoGoogleKibanaPythonSiem Tools
16 Days Ago
Easy Apply
Remote
US
Easy Apply
Expert/Leader
Expert/Leader
Information Technology • Cybersecurity
As a Principal Product Researcher, you will lead efforts in security capabilities, investigate Linux endpoint compromises, test vulnerabilities, and collaborate across teams to enhance security solutions.
Top Skills: DockerEbpfElasticKernel ModulesKibanaKubernetesLinux Distributions
18 Days Ago
Easy Apply
Remote
US
Easy Apply
Senior level
Senior level
Information Technology • Cybersecurity
As a Principal Security Operations Analyst, you will investigate and respond to cyber incidents, mentor junior team members, and lead automation efforts in the Security Operations Center.
Top Skills: Active DirectoryCloud SecurityCommand PromptIncident ResponseMalware AnalysisMicrosoft 365PowershellWindows Server

What you need to know about the Toronto Tech Scene

Although home to some of the biggest names in tech, including Google, Microsoft and Amazon, Toronto has established itself as one of the largest startup ecosystems in the world. And with over 2,000 startups — more than 30 percent of the country's total startups — Toronto continues to attract new businesses. Be it helping entrepreneurs manage their finances, simplifying business operations by automating payroll or assisting pharmaceutical companies in launching new drugs, the city's tech scene is just getting started.
By clicking Apply you agree to share your profile information with the hiring company.

Sign up now Access later

Create Free Account

Please log in or sign up to report this job.

Create Free Account