Senior Threat Researcher: MITRE-Driven EDR & Threat Intel

VulnU; Cork; Hybrid; EUR 48,000 - 105,000; Full time

Benefits offered by this job

Retirement match

Equity

Paid parental leave

Flexible PTO

Learning budget

Job summary

Arctic Wolf is seeking a Threat Researcher to join our Threat Content Team in Cork. You will analyze, research, and develop new content for our Aurora Focus product, translating investigations into detection rules and telemetry content while collaborating with Threat Intel and Security Services.

You will apply MITRE ATT&CK, work with Python scripting to automate internal tools, and deliver regular threat briefings.

Qualifications

• Relevant experience in threat research or threat intelligence roles (2+ years).
• Experience applying MITRE ATT&CK framework to intelligence products and depth of analysis for each tactic and technique.
• Experience analysing application/infrastructure telemetry (logs, flows, metrics, core dumps).
• Experience analyzing phishing/malware campaigns and data breaches.

Responsibilities

• Analyse, research, and develop new content for Aurora Focus detection/telemetry rules.
• Convert investigations into new content; collaborate with Security Services on investigations of threats.
• Fine-tune detections by reducing false positives and adjusting logic.
• Produce and deliver threat briefings to internal and external stakeholders.

Skills

Threat research

Python scripting

MITRE ATT&CK

Threat intelligence

Regex usage

Tools

Git repositories

VMware workstation

Databricks

Elastic search

Kibana

Job description

Arctic Wolf is seeking a Threat Researcher to join our Threat Content Team in Cork. You will analyze, research, and develop new content for our Aurora Focus product, translating investigations into detection rules and telemetry content while collaborating with Threat Intel and Security Services.

You will apply MITRE ATT&CK, work with Python scripting to automate internal tools, and deliver regular threat briefings.