Sysdig
Director, Security Research
Flexible - USA · Director · Full-time
Stay score
odds of building a lasting career here
Thin sponsorship signal and lottery-bound. A low-probability bet with your clock running. Prioritize cap-exempt roles and proven entry-level sponsors first.
Lottery odds assume a STEM candidate.
Personalize to your clock →Employer immigration record
from this employer's Department of Labor filings
Files H-1B transfers
Sourced from Department of Labor LCA, PERM and prevailing-wage disclosure data. Employer matching is by name, so figures may be split across an employer's legal entities. Absence of a filing means none appears in our copy of the data, not that none exists.
Community outcomes
No reports yet — be the first to help the next applicant.
About the role
- Creators of technology trusted by over 60% of the Fortune 500, Sysdig gives teams the real-time clarity to move fast and defend what matters most.
- One direction is research into AI-related threats: attacks on models, agents, and the infrastructure they run on.
Responsibilities
- You will lead the Sysdig Threat Research Team (TRT).
- The department has two halves, and you own both.
- Adversary research is hypothesis-driven and sets its own agenda.
- We will prioritize candidates who have published original work on AI threats and are already building with AI-driven research methods.
- Build a standing capability against model and agent abuse, agentic tool misuse, prompt-layer attacks, the AI supply chain, and attacks on the infrastructure that hosts it all.
- Lead a small team of researchers and engineers, hands-on. Set their technical direction, expand what each can cover, and stay close enough to the work to be credible with the people doing it.
- Own the detection content that ships. The managed ruleset, cloud and identity detections, and the quality of all of it. Rule quality is a number this team moves, not a claim it makes.
- Own the detection platform. The toolchain, the attack reproduction environments, behavior-based detection, and adversary-deception telemetry. Build in-house reproduction for every detection family we ship.
- Partner with Marketing to turn research into content and campaigns that go beyond just the technical write-up.
- Convert research into field capability. Build a library of reusable attack demonstrations, threat briefings, and advisory content, so Sales Engineering and Customer Success can carry this research into customer conversations on their own.
Requirements
- Recognized as a Best Place to Work and one of Deloitte's fastest-growing companies for the past 5 years, we're here to raise the standard for what cloud security and workplace culture should be.
- You are the tie-breaker on what this team investigates and what it ships.
Compensation
- Coverage and evasion resistance should be engineering measurements, not an annual exercise ending in a PDF.
Company info
- At Sysdig, we believe cloud security isn't a compromise - it's a promise.
- From the start, our mission has been clear: to help organizations secure innovation in the cloud, the right way.
- Detection engineering is demand-driven and ships the detection content our customers and the Falco community run in production.
- We are hiring for AI security research specifically, not threat research generally, and we mean that in both directions.
- Detection content this team owns ships to Sysdig customers and, through Falco, to everyone running the CNCF project we created.
This listing is sourced directly from Sysdig's careers page and normalized into a canonical job model.