Senior Staff Security Researcher

We are seeking a Senior Staff Security Researcher to join our Agentic Security Operations Center (SOC) Content-Layer Research team in a remote position within the United States (with an in-office preference for Santa Clara, CA), reporting directly to the Director of Security Research.

In this critical individual contributor role, you will lead the content layer, architecting the connectors, normalization mappings, and security data models that transform raw telemetry from dozens of enterprise vendors across EDR, identity, cloud, network, and vulnerability feeds into structured context our AI agents can reason over.

Responsibilities:

• Monitor, inspect, and evaluate agentic incidents and investigations across customer environments, performing root-cause analysis across source alerts, data pipelines, and agent reasoning to supply evidence-backed feedback to the AI team
• Define necessary telemetry fields and contextual requirements for analyst-grade investigations while ensuring the content layer reliably surfaces required data across all detection surfaces
• Research, analyze, and onboard end-to-end telemetry from emerging security vendor APIs and log schemas, mapping them seamlessly into a unified security data model
• Architect telemetry normalization, multi-source correlation, and governance frameworks to maintain strict data integrity and consistency across hundreds of vendor mappings
• Design, implement, and benchmark incident rules and triage logic to eliminate false positives and validate the precision of alert grouping

Requirements:

• Recognized technical authority in threat detection and security telemetry
• Autonomous, hands-on individual contributor with a proven record of driving complex technical roadmap deliverables from inception to production
• Exceptional analytical discipline and research rigor to troubleshooting complex data regressions, schema inconsistencies, and model evaluation challenges
• Excellent cross-functional partnership and communication skills
• Practical experience working with, evaluating, or optimizing AI agents, large language models, or automated reasoning workflows in security operations or threat analysis
• 10+ years of dedicated experience in security engineering, detection engineering, threat hunting, or threat research within an enterprise SOC, MDR provider, or security vendor

Nice to Have:

• Specialized expertise designing, evaluating, and fine-tuning multi-agent architectures or autonomous LLM reasoning frameworks for threat triage and incident response
• Strong background in offensive security, red teaming, or penetration testing
• Practical experience with open security data schemas (e.g., OCSF, ECS, Google UDM, Splunk CIM)

Benefits:

• Various health plans
• Time off plans for vacation and sick time
• Parental leave options
• Retirement options
• Education reimbursement
• In-office perks, and more!