Threat Detection Engineer - Windows/macOS (EDR)

Iru; Miami (FL); Hybrid; USD 120,000 - 160,000; Full time

Benefits offered by this job

Competitive salary

Hybrid work environment (3 days in in‑

100% medical + dental + vision

401(k) with company match

PTO 20 days

Equity for full-time employees

In-office lunch stipend

Paid family and medical leave

Onsite fitness center

Free parking

Job summary

Iru is seeking a Security Researcher focused on detection engineering for Windows and macOS to join our Threat Intelligence and Research team. You’ll own detections end to end—from research to shipping into our EDR product—with file-based and behavioral logic and strong emphasis on validating and refining detections.

You’ll reverse engineer malware, hunt for threats, and contribute to our Vulnerability product by refining public data.

Qualifications

• 3–5 years of experience in cybersecurity with a hands-on focus on detection engineering and malware analysis.
• Depth on Windows with willingness to grow macOS expertise.
• Experience building file-based and behavioral detections for endpoints (YARA, Sigma) and shipping them into a product or production environment.
• Experience taking a detection from research through testing and release, maintaining it over time as adversary behavior changes.
• Strong understanding of OS internals and endpoint security mechanisms on Windows and macOS.
• Familiarity with MITRE ATT&CK and threat tradecraft.

Responsibilities

• Own detections end to end: research the behavior, write the logic, validate it, and ship it into our EDR product.
• Develop and enhance file-based and behavioral detections for Windows and macOS (YARA, Sigma, and our own rule formats).
• Analyze malware and adversarial behavior to identify detection opportunities across platforms.
• Map coverage against adversary tradecraft and prioritize what to build next.
• Test detections against real samples and emulated behavior before release to customers.
• Work with telemetry from our agent to identify needed events and sensor capabilities.
• Collaborate with engineering to integrate detection logic into cross-platform agent.
• Hunt for threats using threat intel platforms and turn findings into coverage.
• Contribute to Vulnerability product by triaging CVEs and enriching data.
• Research how vendors version and distribute software to improve vulnerability reporting.
• Build tooling and automation for analysis pipelines and rule testing workflows.
• Monitor emerging threats and surface research-driven roadmap suggestions.
• Review teammates’ detection content and raise quality levels.
• Author blog posts and present findings at conferences.

Skills

Detection engineering

Malware analysis

Windows OS internals

macOS internals

YARA

Sigma

Python

PowerShell

Bash

SQL

Threat intelligence

Tools

Binary Ninja

Ghidra

IDA

WinDbg

Sysinternals

Mac Monitor

Job description

Iru is seeking a Security Researcher focused on detection engineering for Windows and macOS to join our Threat Intelligence and Research team. You’ll own detections end to end—from research to shipping into our EDR product—with file-based and behavioral logic and strong emphasis on validating and refining detections.

You’ll reverse engineer malware, hunt for threats, and contribute to our Vulnerability product by refining public data.