Senior Threat Researcher - Endpoint / Cloud at Arctic Wolf in Bengaluru

Job description

At Arctic Wolf, you will not just watch the cybersecurity industry evolve – you will help lead the change. Our global team is made up of people who thrive on solving complex problems, moving quickly, and building technology that protects organizations around the world. We are proud to be recognized by Forbes, CNBC, Fortune, CRN, Gartner Peer Insights, and International Data Corporation MarketScape. What matters most is the work behind these recognitions: delivering real outcomes for customers through award-winning innovation such as our Aurora Platform. If you are looking for meaningful work, smart teammates, and the opportunity to make a real impact in a high-growth company that is redefining security operations, Arctic Wolf is the right place for you. Our mission is simple: End Cyber Risk. We are looking for a Senior Threat Researcher Endpoint/Cloud - Detections to help achieve this mission. The Senior Threat Researcher Endpoint/Cloud - Detections will contribute to our Detection Engineering organization by developing, maintaining, and enhancing advanced security detections across endpoint, cloud, and network environments. This role will focus on building high-quality detection content, improving detection efficacy, researching emerging threats, and delivering actionable intelligence that helps protect Arctic Wolf customers from evolving cyber threats. IN THIS ROLE, YOU WILL: • Develop and maintain high-quality custom detection rules across endpoint, cloud, and network environments • Research emerging threats, attack techniques, and telemetry sources to improve detection coverage and effectiveness • Design, develop, and continuously improve anomaly-based and behavioral-based detections • Conduct code reviews and provide constructive feedback to ensure code quality, maintainability, and scalability • Troubleshoot, debug, and enhance existing detection and signature codebases • Participate in the full software development life cycle by building secure, efficient, testable, and maintainable detection content • Collaborate with team members to develop innovative detections and continuously tune existing detection capabilities • Propose improvements to detection coverage, efficacy, and overall security visibility • Build runbooks, reports, documentation, and supporting materials for detection surfaces • Document research findings and share knowledge across engineering, security operations, and research teams • Communicate technical concepts and security findings effectively to both technical and non-technical audiences • Continuously learn and adopt industry best practices in software development, detection engineering, and cybersecurity • Participate in research and development demonstrations, innovation initiatives, and annual hackathon events that contribute to future product capabilities YOU WILL BE SUCCESSFUL IN THIS ROLE IF: • You have 5 or more years of experience authoring and maintaining security detections • You have strong expertise in endpoint, cloud, or network detection and signature development • You have experience developing anomaly-based and behavioral-based detections • You have extensive experience tuning and optimizing detections to improve fidelity and reduce false positives • You have experience using MITRE ATT&CK, packet capture analysis, and threat intelligence sources to drive detection development • You have strong knowledge of cybersecurity principles, threat detection methodologies, and adversary behaviors • You have experience working with security monitoring and detection technologies within Managed Detection and Response environments • You are passionate about solving complex security challenges and continuously improving detection capabilities Helpful to Have: • Experience developing Security Information and Event Management detections • Experience creating Endpoint Detection and Response detections and signatures • You possess knowledge of networking concepts, protocols, and authentication techno