Threat Researcher

1 month, 2 weeks ago
Full-time
Senior
Data Science and Analytics
GreyNoise

GreyNoise

GreyNoise provides cybersecurity solutions to help SOC teams identify and prioritize relevant threats by analyzing internet noise, leading to increased efficiency and improved security posture.

Internet Software & Services
51-250
Founded 2017
$26M raised

Description

  • Conduct hypothesis- and lead-driven hunting across first-party data and telemetry to identify novel malicious activity and campaigns.
  • Cluster, track, attribute, research, and disrupt malicious cyber threats.
  • Develop and integrate intelligence sources, data, tools, systems, and tradecraft to build comprehensive threat pictures.
  • Produce and share actionable threat intelligence with customers and the public.

Requirements

  • Deep understanding of computer networking fundamentals and protocols.
  • Advanced ability to analyze network traffic, including full PCAP at macro and packet levels.
  • Expertise with offensive tooling, tradecraft, and exploitation methods targeting network edge devices.
  • Experience conducting open-source and commercial intelligence research.
  • Experience with hardware and embedded systems.
  • Experience using query languages such as SQL.
  • Experience creating and tuning detection rules using tools such as Suricata and YARA.
  • Experience with binary analysis and reverse engineering.
  • Experience with cyber threat intelligence frameworks and analytical tradecraft.
  • Experience using graph-based threat analysis tools such as Synapse.
  • Experience applying AI, including prompt engineering and harness engineering.
  • Experience presenting at relevant security or intelligence conferences.
  • US work authorization is required; US-based roles are fully remote within the United States.

Benefits

  • Equity in a high-growth, Series A startup.
  • 100% employer-covered health, dental, vision, and life insurance.
  • 6% 401(k) employer match, fully vested from day one.
  • Flexible paid time off, with a recommended minimum of 120 hours annually.
  • Remote-first work culture with optional attendance at the Washington, DC-area headquarters.
  • Apple Mac laptop and $500 equipment-accessories stipend.
  • Four months of paid parental leave, plus two months of optional unpaid leave.
  • $1,500 annual professional development budget.
  • Company offsites and monthly local team events.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Manager, Threat Intelligence

PDI Technologies, 1K-5K Gas Utilities

PDI Technologies is seeking a Threat Intelligence, Threat Hunting, and Detection Engineering leader to build and lead a SOC program that protects more than 12,000 convenience retail, petroleum, hospitality, and automotive customers.

AWS Azure Cybersecurity Python SIEM Splunk
5 hours, 35 minutes ago

Incident Response & DFIR Lead

JustMarkets 1-10 Capital Markets

Lead incident response and digital forensics investigations for a fintech company, coordinating containment, recovery, evidence preservation, and improvements to cyber defense capabilities.

Active Directory AWS Linux Network Security PowerShell Python SIEM
1 week, 2 days ago

Cyber Security Specialist

RecargaPay 251-1K Capital Markets

RecargaPay is hiring a Cyber Security Specialist to join its remote CSIRT team and lead detection, response, containment, and automation for security incidents across its cloud-native payments platform.

AWS Bash CrowdStrike Cybersecurity Elasticsearch Kibana Linux Python
1 week, 2 days ago

IT SOX Admin

CareDx 251-1K Pharmaceuticals

CareDx is seeking an IT compliance and systems documentation professional to strengthen system governance, access controls, audit readiness, and operational integrity in its regulated precision-medicine diagnostics environment.

Active Directory Git NetSuite
2 weeks, 1 day ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers