Detection Researcher (Coding Focused)

Key Responsibilities

• Research and analyze advanced detection bypass techniques (e.g., rooting, hooking, and runtime application/system tampering) to assess threats to our detection systems.
• Evaluate and reverse-engineer tools and frameworks used to attack or evade our products, documenting findings and attack vectors.
• Lead and participate in structured brainstorming sessions to generate novel detection ideas and countermeasures.
• Help design, prototype, and implement new detection techniques and algorithms for different operating systems.
• Help develop, maintain, and improve internal tooling and automation to accelerate analysis, triage, and detection development.
• Perform and contribute to internal penetration testing and adversary emulation of newly introduced security features to validate effectiveness.
• Conduct thorough code reviews and technical reviews of detection-related contributions to ensure quality, maintainability, and correctness.

Required Skills & Experience

• Proven ability to collaborate effectively within a team environment, including forming and leading focused sub-groups to deliver specific project features or research objectives.
• Proficiency in reverse engineering using tools such as IDA Pro, Ghidra, or equivalent, including experience writing scripts, leveraging their SDKs, and isolating and reporting technical issues.
• Solid programming experience in C, C++, Python and Java, with the ability to produce efficient, maintainable, and secure code.
• Good knowledge of the ELF and MachO file formats and a general good understanding on how to consult the official documentation.
• Familiarity with the LLVM framework is considered a plus.
• Knowledge of code obfuscation and de-obfuscation techniques, along with awareness of community tools and methodologies in this area, is a valuable asset.