Huntress

Principal Product Researcher - EDR (Windows)

United States of America · Principal · Full-time

Sponsorship not specified$200k-$230kDetected 5 days ago

PythonC++C#PowerShellElasticsearchCybersecuritySOC OperationsDetection EngineeringIncident ResponseResearchCollaborationMentoringPublic Speaking

About the role

That pushes defenders like us to operate at the highest level, and it deepens our need for good people who want to make a meaningful impact.
We work closely with security teams and service providers protecting complex environments, often without the time or headcount to handle it all.
Huntress now secures more than 5M endpoints and 11M identities worldwide.

The Security Operations team addresses this challenge head-on by building and scaling highly automated efficiencies-often lightly augmented by our SOC - that make intruders earn every inch of their access while maintaining affordability and healthy gross margins.
Develop cross-platform features that leverage telemetry from common OS subsystems such as file system, memory, process, and network activity
Research and development of sensor capabilities to provide visibility and detection support for attack techniques across supported Windows OS versions
Work collaboratively with internal engineering and detection teams to implement detection logic
Perform False Positive and False Negative investigations
Lead product research initiatives to develop and evaluate security product strategies and technologies
Uses AI to support information gathering, analysis, prototyping, and production of clear, decision-useful work products while maintaining accountability for the final output
Builds and reuses lightweight prompts, templates, or workflows for recurring research tasks rather than relying on one-off use
That's why we build our technology in-house and back it with a 24/7 human-led Security Operations Center (SOC).
As a result, our platform is never disconnected from the experts who manage it, ensuring our customers' protection.

Prior experience with Windows OS kernel coding and device drivers
Experience testing EDRs, bypasses, and evasion techniques
Proficiency in multiple programming/scripting languages, such as C/C++/C#, PowerShell, and Python
Experience with MITRE ATT&CK matrix, SIGMA, Yara, and Elasticsearch/Kibana
Expert in Windows OS internals, components, APIs, and design
Comfortable with reverse engineering and using debuggers
Applies AI to improve research quality, speed, and outputs in day-to-day work
Commitment to clear documentation of research findings

Please note that non-accommodation requests to this inbox will not receive a response.

Range: $200,000 to $230,000 base plus bonus and equity
We defend over 5M endpoints for 225,000+ mid-sized and small-business customers, and that number continues to grow each month.

Cybercrime is growing, and more businesses are getting hit by threats that used to target only the biggest organizations.
Founded in 2015 by former NSA cyber operators, Huntress is a remote-first team working to make enterprise-grade cybersecurity accessible to businesses of all sizes.
Those numbers keep growing because more businesses rely on us to help carry the load and operate with more confidence.
Every day, you can see that commitment in how we stand with our customers and how we show up for each other.
We defend over 5M endpoints for 225,000+ mid-sized and small-business customers, and that number continues to grow each month.
Applies AI as a practical part of day-to-day product research work to improve the speed, quality, and impact of research outputs
Develop internal and external technical documentation to educate customers and communicate research findings to adjacent teams about security risks and opportunities

This listing is sourced directly from Huntress's careers page and normalized into a canonical job model.