Remote Security Researcher: Detection & Investigation

Weve Security Limited; Ireland; Remote; EUR 70,000 - 110,000; Full time

Benefits offered by this job

Remote work

Job summary

Weve is hiring a security researcher to turn ambiguity in workplace activity into precise detections and investigations. You’ll define observable behaviour, identify data needs and collaborate with engineering to operationalize research.

You’ll own detection strategies across identity, cloud activity and AI usage, and work with field teams to improve accuracy, reduce false positives, and provide clear validation results.

Qualifications

• Hands-on experience in detection engineering, incident response, threat research or related security discipline.
• Ability to reconstruct activity from audit logs and explain what logs establish or do not establish.
• Practical scripting and data-analysis skills to explore behavior and test hypotheses.
• Good judgement about evidence, privacy and authorization when investigating employee activity.
• Clear writing to explain a detection’s assumptions, failure modes and validation approach.

Responsibilities

• Research misuse of legitimate access, risky sharing, unusual agent activity and related workplace threats using authorised environments.
• Specify signals, relationships and history needed to distinguish credible risk from normal work.
• Develop investigation approaches with evidence and benign explanations, with clear limits on conclusions.
• Build representative evaluation cases, including near misses and incomplete telemetry.
• Collaborate with applied AI and engineering to turn research into maintained detections and evaluation criteria.
• Review customer findings with field engineering to improve the system.

Skills

Detection engineering

Incident response

Threat research

Scripting

Data analysis

Audit log reconstruction

Privacy & authorization

Technical writing

Job description

Weve is hiring a security researcher to turn ambiguity in workplace activity into precise detections and investigations. You’ll define observable behaviour, identify data needs and collaborate with engineering to operationalize research.

You’ll own detection strategies across identity, cloud activity and AI usage, and work with field teams to improve accuracy, reduce false positives, and provide clear validation results.