Security Researcher (Detection Systems)

Cylake; Sunnyvale (CA); On-site; USD 150,000 - 250,000; Full time

Job summary

Cylake in Sunnyvale, CA is building a next-generation cybersecurity platform. You will architect and implement threat detection capabilities, leading research systems and tools with input from data scientists, shaping the future of defense.

The role requires deep expertise in threat hunting, malware analysis and modern attack techniques, strong Python, and communication skills. This leadership position offers a path to influence product direction from day one and impact security at scale.

Qualifications

• 5+ years of experience in building large-scale threat analysis and detection solutions across security logs, malware, network traffic, or vulnerabilities.
• Deep expertise in threat hunting, malware analysis/sandboxing, vulnerability analysis, reverse engineering, or penetration tests.
• Knowledge of MITRE ATT&CK framework, kill chain/TTPs and modern attack techniques.
• Strong Python skills; system programming in C/C++/Rust/Go is a plus.
• Excellent communication and documentation abilities.

Responsibilities

• Develop advanced threat detection capabilities for the next-gen security operation platform.
• Research emerging threats, adversary tactics, and attack techniques to design end-to-end detection coverage.
• Build and enhance research systems focused on threat analysis, APT simulation, CTI, and security knowledge graphs.
• Collaborate with data scientists to develop AI-driven security workflows and training datasets.

Skills

Python programming

Threat hunting/detection

Reverse engineering

Security research

Communication & documentation

Education

Ph.D. in Computer Science or related field

Tools

EDR/XDR

Malware analysis tools

Threat intel platforms

Job description

Your Impact

Join a small team building the next generation of cybersecurity products from the ground up. Led by industry veterans with a proven track record of success - you will get to architect, build, and deliver hugely impactful products with this world-class team. You will have the opportunity to grow your career and skills along with the company from the very start.

Your Impact

Join a small team building the next generation of cybersecurity products from the ground up. Led by industry veterans with a proven track record of success - you will get to architect, build, and deliver hugely impactful products with this world-class team. You will have the opportunity to grow your career and skills along with the company from the very start.

Role Overview

As a subject matter expert in cyber attack and defense, you will architect and build comprehensive threat detection capabilities for our next-gen security platform, leveraging your deep understanding of the evolving threat landscape. You will also develop innovative research systems and tools to deliver broad, scalable threat coverage. This key leadership role offers the opportunity to shape the future of threat detection in the cybersecurity industry.

Responsibilities

• Develop advanced threat detection capabilities in the next-gen security operation platform.
• Research emerging threats, adversary tactics, and sophisticated attack techniques to design and implement end-to-end detection coverage
• Build and enhance research systems focused on threat analysis, advanced persistent threat (APT) simulation, cyber threat intelligence (CTI), and security knowledge graph.
• Partner with data scientists to develop agentic AI workflows, security-focused models and training datasets for cybersecurity use cases.

Required Experiences

• 5+ years of experience on building large-scale threat analysis and detection solutions across one or more of the following: security logs, malware, network traffic, web page and vulnerability exploitation, and/or a Ph.D. in Computer Science, System/Network Security, or a related technical field.
• Deep expertise in one or more of the following areas: threat hunting, malware analysis and sandboxing, vulnerability analysis, reverse engineering, offensive security, or penetration tests.
• Deep understanding on modern attacks and evasion techniques, malware behaviors and countermeasures, MITRE ATT&CK framework, cyber kill chain/TTPs.
• Strong proficiency in Python programming. System programming with C/C++/Rust/Go is a big plus.
• Great passion for security research; strong communication and documentation skills.

Preferred Experience

• Participation in Capture the Flag (CTF) competitions, contributions to open-source security projects, vulnerability disclosures (CVEs), attack campaign research, technical blogs, or security research publications and presentations.
• Experience working as a SOC analyst, detection engineer, red team, blue team member, or security researcher within large-scale enterprise environments.
• Deep understanding of modern operating system internals, system APIs, and security products such as EDR/XDR, SOC platforms, firewall, IDS/IPS, or related security technologies.
• Familiarity with cyber threat intelligence, attack causality analysis, provenance-based intrusion detection systems, and advanced threat detection methodologies.
• Experience developing machine learning models for security detection use cases and applying LLMs or agentic AI to accelerate security research, analysis, and detection workflows.

We offer competitive compensation and a comprehensive benefits package designed to support our employees’ health, well-being, and long-term success. The expected salary range for this position is $150,000 – $250,000 per year. Within this range, individual pay is determined based on job-related factors including skills, experience, qualifications, and internal equity. Most candidates can expect an offer within the range listed above. Your recruiter will provide additional details on compensation and benefits to qualified candidates during the hiring process.

We’re committed to building a diverse, inclusive workplace where everyone can do their best work. We are proud to be an equal opportunity employer and do not discriminate on the basis of race, religion, color, national origin, sex, sexual orientation, age, veteran status, disability, genetic information, or other applicable legally protected characteristic. If you require a reasonable accommodation during the application or interview process, please let us know — we’re happy to support you.

This position requires access to information protected under U.S. export control laws and regulations, including the Export Administration Regulations (EAR) and the International Traffic in Arms Regulations (ITAR). Any offer of employment will be conditioned on authorization to receive software or technology controlled under these laws and regulations without sponsorship for an export license.