Principal Security Researcher - EDR (Windows)

A principal researcher on Huntress's Product Research team, reporting to the Manager, Product Research, who finds new ways for the company's EDR to catch threats on Windows, protecting millions of endpoints at small and mid-sized businesses. The researcher develops sensor capabilities and cross-platform features built on file system, memory, process and network telemetry, spots new telemetry sources and coverage gaps, works with engineering and detection teams on detection logic, handles product escalations and false positive or negative investigations, and shares findings through documentation, talks and blogs.

Huntress wants expert knowledge of Windows internals and APIs, kernel and driver coding experience, EDR testing and evasion work, reverse engineering with debuggers, C, C++, C#, PowerShell and Python, and familiarity with ATT&CK, Sigma and YARA. Remote in the US.