Security Researcher: Threat Detection & EDR Engineer (Hybrid)

VulnU; Miami (FL); Hybrid; USD 110,000 - 140,000; Full time

Benefits offered by this job

Hybrid work environment

Health/dental/vision coverage

401(K) with company match

Equity for employees

PTO 20 days

Job summary

Iru is seeking a Security Researcher to own detections from research to deployment, developing Windows/macOS file-based and behavioral detections (YARA, Sigma) and validating them against real-world adversary behavior. You will map coverage to MITRE ATT&CK, test against samples, and collaborate with engineers to ship coverage in our cross-platform security agent.

Responsibilities include threat hunting, vulnerability triage, and tooling for analysis pipelines.

Qualifications

• Hands-on detection engineering & malware analysis experience.
• Experience turning research into production detections.
• Strong understanding of Windows/macOS OS internals and telemetry.

Responsibilities

• Own detections end to end from research to ship.
• Develop file-based and behavioral detections for endpoints.
• Map coverage to MITRE ATT&CK & real-world campaigns.
• Hunt for new threats using threat intel platforms.
• Collaborate with engineering to integrate detection logic into the agent.
• Triage CVEs and enrich vulnerability data in products.
• Build and maintain tooling for analysis pipelines and rule testing.
• Present findings in blogs/conferences and document clearly.

Skills

Detections engineering

Malware analysis

Threat hunting

OS internals

Python scripting

PowerShell/Bash/SQL

MITRE ATT&CK familiarity

Communication of research

Education

Bachelor degree in CS/cybersecurity or equivalent

Tools

YARA

Sigma

Binary Ninja

Ghidra

Job description

Iru is seeking a Security Researcher to own detections from research to deployment, developing Windows/macOS file-based and behavioral detections (YARA, Sigma) and validating them against real-world adversary behavior. You will map coverage to MITRE ATT&CK, test against samples, and collaborate with engineers to ship coverage in our cross-platform security agent.

Responsibilities include threat hunting, vulnerability triage, and tooling for analysis pipelines.