Security Researcher

Darktrace; Greater London; On-site; GBP 65,000 - 90,000; Full time

Benefits offered by this job

Holiday entitlement: 23 days + public

Birthday day off

Private medical insurance

Life insurance 4x salary

Salary sacrifice pension

Extended family leave

Employee assistance program

Cycle to work

Job summary

Darktrace is seeking a Security Researcher to investigate emerging cyber threats and attacker behaviours, translating findings into improvements to our threat detection technology. You will work with teams across the business to turn research insights into actionable product enhancements.

The role emphasizes technical data analysis, scripting, and staying current with the evolving threat landscape, including AI-related security challenges. A collaborative, fast-paced environment awaits.

Qualifications

• Understanding of networking fundamentals and security concepts.
• Familiarity with attacker TTPs across networks, cloud, endpoints and email security.
• Interest in AI security challenges and agentic AI.
• Strong analytical and problem-solving abilities for complex tech problems.
• Ability to clearly communicate technical findings, both written and verbal.
• Collaborative mindset with ability to work independently and make solid decisions.

Responsibilities

• Investigate emerging threat actor techniques, tactics and procedures (TTPs) across prod and lab environments.
• Analyze security data to understand attacker behaviours and identify detection opportunities.
• Collaborate with development teams, share research findings and inform future research and product direction.
• Support development and testing of new approaches to detecting malicious or anomalous activity.
• Undertake data analysis, scripting and technical research to improve products and capabilities.
• Keep up to date with cyber threat landscape and apply findings to ongoing research.

Skills

Networking fundamentals

Attack techniques (TTPs)

AI security interest

Analytical thinking

Clear communication

Collaborative & independent work

Tools

Python

Bash/PowerShell

Job description

Darktrace is a global leader in AI-driven cybersecurity, helping organizations stay ahead of evolving threats every day.

Darktrace was built on a genuinely differentiated idea: that Adaptive AI could detect and respond to novel, real-time cyber threats. That approach matters more than ever in the era of AI. Today, our customers depend on us to stay ahead.

At Darktrace, we are energized by that responsibility. We work across teams and rally around a shared goal. We own outcomes end to end - step in, step up and see things through without waiting to be asked. We make decisions with urgency, say the hard thing, and hold each other to high standards with care and directness. We move first and learn fast anticipating where our customers are going next, continuously challenging ourselves.

We invest in the skills, learning and opportunities that help people deliver at the level their roles demand, and reward the aptitude and curiosity to grow beyond them.

Our Values: Own It | Win as One | Raise Our Bar | Move First. Learn Fast

Job Description

What will I be doing?

As a Security Researcher, you’ll investigate emerging cyber threats and attacker behaviours to understand how real-world attacks operate and how they can be detected. You’ll apply your research to real security challenges, working with teams across the business to turn your findings into improvements to our technology and approach to threat detection.

Responsibilities Include

• Investigating emerging threat actor techniques, tactics and procedures (TTPs) across production and lab environments.
• Analysing security data to understand attacker behaviours and identify opportunities to improve detection and response.
• Working closely with development teams, sharing research findings and helping inform future research and product development.
• Supporting the development and testing of new approaches to detecting malicious or anomalous activity.
• Undertaking data analysis, scripting and other technical research to continuously improve our products and capabilities.
• Keeping up to date with developments across the cyber threat landscape and applying relevant findings to ongoing research.

What experience do I need?

Essential

• A good understanding of networking fundamentals and core security concepts,
• An understanding of common attacker techniques, tactics and procedures (TTPs), with familiarity across areas such as Network, Cloud, Endpoint and Email security,
• An interest in emerging security challenges associated with AI systems and agentic AI,
• Strong analytical and problem-solving skills, with the ability to investigate complex or unfamiliar technical problems,
• Good organisational skills and the ability to communicate technical findings clearly,
• A collaborative approach, alongside the ability to work independently and make well-reasoned decisions.

Desirable

• Experience or practical exposure, whether through employment, internships, academic research, personal projects or labs, in areas such as: Security Operations Centre (SOC) analysis Incident response Detection engineering Threat hunting Malware or threat research,
• Scripting or programming experience, for example Python, Bash or PowerShell,
• Experience working with security datasets, data analysis or statistical techniques,
• Familiarity with frameworks such as MITRE ATT&CK,
• Experience with, or knowledge of, our products and technologies.

Benefits

• 23 days’ holiday + all public holidays, rising to 25 days after 2 years of service,
• Additional day off for your birthday,
• Private medical insurance which covers you, your cohabiting partner and children,
• Life insurance of 4 times your base salary,
• Salary sacrifice pension scheme,
• Enhanced family leave,
• Confidential Employee Assistance Program,
• Cycle to work scheme.

As a growing business strengthening its governance and controls, this role plays a part in supporting high standards of integrity and accountability.

Darktrace is an Equal Opportunity Employer. We consider all qualified applicants for employment without regard to race, color, religion, sex (including pregnancy, childbirth, and related medical conditions), sexual orientation, gender identity or expression, national origin, age, disability, genetic information, marital status, veteran or military status, or any other characteristic protected by applicable federal, state, or local law.

Darktrace is committed to providing reasonable accommodations to qualified individuals with disabilities in accordance with applicable laws. If you require a reasonable accommodation to participate in the application or interview process, please contact your Talent Partner.