Director, Security Research

Leads the Sysdig Threat Research Team, which has two parts: adversary research that sets its own agenda, and detection engineering that ships the rules Sysdig customers and the Falco open-source community run in production. This hire is aimed squarely at AI security research, both studying attacks on models, agents and their infrastructure and using agents to reproduce, analyse and write detections at scale.

The director sets what the team investigates, which detection content ships and how the budget is spent, and leads a small team of researchers and engineers while staying hands-on. The role builds a standing capability against abuse of models and agents, agents misusing their tools, prompt injection and related attacks, compromise of the AI supply chain, and attacks on the servers that host AI, and turns findings into tuned detections and published research. It owns the managed ruleset and cloud and identity detections, runs adversarial testing against Sysdig's own rules, and owns the detection platform, reproduction environments and deception telemetry. Public work is expected: original discoveries, CVEs, named campaigns and conference talks. The director also works with Marketing on content, gives Sales Engineering and Customer Success reusable attack demonstrations and briefings, and advises Product on how attackers would beat planned features.

Sysdig wants a decade or more of threat or security research or detection engineering, four or more leading researchers with budget ownership, published original AI security work or shipped detections, deep Linux, container, Kubernetes and cloud internals, and a public body of work. Remote in the US.