Remote Senior Threat Researcher Behavioral Protection

3 hours ago

Vancouver, British Columbia, Canada Sophos Full-time
About Us


Role Summary 

 

We are seeking a skilled and passionate Threat Researcher with deep expertise in Windows based threat behaviors, particularly having a strong understanding on memory-resident threats. In this role, you will be at the forefront of detecting and understanding emerging attack techniques, developing behavioral-based protection strategies, and enhancing our real-time protection capabilities. Your insights and contributions will directly impact on the security posture of millions of users worldwide. 

What You Will Do





  • Analyze malware behaviors aligned with MITRE ATT&CK TTPs (and beyond), covering the full attack lifecycle, including initial access vectors, execution techniques, payload delivery—with a strong focus on in-memory techniques, fileless malware, and evasive behaviors. 








  • Research and identify behavioral techniques employed by novel and sophisticated Advanced Persistent Threats (APTs) and translate these insights into effective behavioral protection rules to enhance prevention capabilities. 








  • Drive protection coverage for zero-day malware and novel attack techniques. 








  • Work independently with minimal supervision while managing priority protection tasks. 








  • Review and provide actionable feedback on detection logic and code developed by fellow researchers.