<p>Location: Remote</p><br/><p>Employment Type: Full-time (Remote)</p><br/><p>Team: Intelligence</p><br/><div><b style="font-size: 18px">Who We Are</b></div><div><span style="font-size: 11pt">Red Canary was founded to create a world where every organization can make its greatest impact without fear of cyber threats. We’re&nbsp;a cyber security company who protects, supports and empowers organizations to make better security decisions so they can focus on their mission without fear of cyber threats. </span></div><div><br></div><div><span style="font-size: 11pt">The combination of our market-defining technology and expertise prevents breaches every day and sets a new standard for partnership in the industry. We’re united in our commitment to customers and grounded in our values, which earned us a place on the Forbes Best Start-up Employers 2022 list.&nbsp; If our mission resonates with you, let’s talk.</span></div><div><br></div><div><b style="font-size: 18px">What We Believe In</b></div><div>- Do what’s right for the customer</div><div>- Be kind and authentic</div><div>- Deliver great quality</div><div>- Be relentless </div><div><br></div><div><b style="font-size: 18px">Challenges You Will Solve</b></div><div><span style="font-size: 16px">The Threat Research team is responsible for answering the question, “how does this attack technique work and how do we detect it?” To answer this question confidently, you will apply a formalized research methodology resulting in the development of attack technique automation, documentation, and detection recommendations that scale across all of our customers. You will excel in this role as someone who: applies an adversarial mindset, is intimately familiar with Cloud-related attack techniques, develops and validates research hypotheses, and can communicate technical concepts in an accessible, succinct fashion.</span></div><div><br></div><div><span style="font-size: 16px">Leveraging your extensive knowledge in Cloud security concepts and adversary attack paths, you will be a key stakeholder to continuously prioritize our product development and detection engineering efforts. You will serve as a technical subject matter expert on Cloud technologies at Red Canary and help drive product strategy and implementation. You understand how to dive deep into adversary techniques to better inform defensive decisions and communicate those lessons with the team and broader industry. You understand how to find and document the relevant data for making informed decisions about threats. You also know how adversaries evade detections and you will apply your extensive knowledge to anticipate and act on real and hypothetical evasion opportunities. You’ve performed research in the past and understand its place in producing practical, operational deliverables. You ask really good questions, maintain focus, thrive in transforming ambiguity into confidence, and you are firmly grounded in reality, with a focus on operationalizing your research. You will be relied upon as a subject matter expert who understands adversary trends and who can get their hands dirty by understanding and replicating adversary tradecraft.</span></div><h3>What You'll Do</h3><br/><ul><li>Scope research initiatives and continually refine scope as needed.</li><li>Write attack technique automation code. Replicating attack techniques is crucial to understanding the data available to make informed detection decisions. You will specifically develop code to automate attack techniques similar to the form of our AtomicTestHarnesses module.</li><li>Research and analyze attack techniques related primarily to AWS Cloud services. Additional Cloud platform expertise is welcomed.</li><li>Document and present your research findings and deliverables in an easy to understand, actionable manner both internally and externally.</li><li>Work closely with detection engineers, intelligence analysts, and threat hunters to prioritize and refine your deliverables.</li><li>Apply an adversarial mindset to your research and detection engineering recommendations.</li><li>Serve as a technical mentor for those interested in pursuing research as a discipline and practice.</li><li>Work hard to understand the technical components and related detection optics that underlie a technique. In doing so, you will also comprehend the extent to which adversaries can exercise control over variations of the researched technique.</li><li>Collaborate across Red Canary to develop new detection methodologies.</li></ul><br/><h3>What You'll Bring</h3><br/><ul><li>5+ years of experience conducting security research with actionable outcomes.&nbsp;</li><li>Experience working with commercial Endpoint Detection &amp; Response (EDR) and/or Cloud-based detection platforms.</li><li>Software development experience in at least one scripting language (e.g. PowerShell, Python, etc.) and/or one compiled language (e.g. Go, Ruby, .NET, Rust, etc.).</li><li>Extensive security experience in AWS and its available data source for optics and detection. Additional Cloud platform expertise is welcomed.</li><li>Have an established record of public, community engagement (conference talks, blog posts, or webinars, etc.)</li><li>Experience managing code with git/GitHub.</li><li>Understands the role of detection engineering and threat hunting.</li></ul><br/><div>Targeted base salary: $176,600 - $195,000 + bonus eligibility and equity depending on experience.</div><div><br></div><div><i>Benefit Highlights:</i></div><div><i>-&nbsp;100% Paid Premiums:&nbsp;</i><b><i>&nbsp;</i></b><i>Red Canary offers a 100% paid plan option for medical, dental and vision for you and your dependents. No waiting period.</i></div><div><i>- Health &amp; Wellness -&nbsp;Access to mental health services, Employee Assistance Program and additional programs to incentivize healthy habits.&nbsp;&nbsp;</i></div><div><i>- Fertility Benefits: All new hires are eligible for benefits as of their first day.</i></div><div><i>- Flexible Time Off: Take the time you need to recharge including vacation, sick, bereavement, jury duty, and holidays.&nbsp;</i></div><div><i>- Paid Parental Leave-&nbsp;Full base pay to bond/care for your new child.</i></div><div><i>- Pre-Tax Plans -&nbsp;Red Canary offers a variety of plans to fit you and your dependent specific needs including FSA, HRA and HSA, with employer funding to offset out of pocket health care expenses.&nbsp;</i></div><div><i>- Flexible Work Environment-&nbsp;With 60% remote workforce, Canaries can work virtually from almost anywhere in the US.</i></div><div><br></div><div><i>The application deadline is March 29th, 2024.</i></div><div><br></div><div><b style="font-size: 18px">Why Red Canary?</b></div><div>Red Canary is where people embody our mission to improve security outcomes for all. People work hard to maintain a culture that encourages authenticity in order to do your best work. Our people are driven and committed to finding the best security outcomes, delivering real and actionable answers, and being transparent along the way.&nbsp;</div><div><br></div><div>At Red Canary, we offer a very rich benefits program to our full-time team members so they can focus on their families and improving our customers’ security. For a full list of benefits, please review our Benefits Summary:</div><div>https://resource.redcanary.com/rs/003-YRU-314/images/RedCanary_2024BenefitsSummary.pdf?version=0</div><div><br></div><div><i>Individuals seeking employment at Red Canary are considered without regard to race, color, religion, national origin, age, sex, marital status, ancestry, physical or mental disability, veteran status, gender identity, or sexual orientation.</i></div>

Location: Remote

  

Employment Type: Full-time (Remote)

  

Team: Intelligence

  

 **Who We Are**

Red Canary was founded to create a world where every organization can make its
greatest impact without fear of cyber threats. We’re a cyber security company
who protects, supports and empowers organizations to make better security
decisions so they can focus on their mission without fear of cyber threats.

  

The combination of our market-defining technology and expertise prevents
breaches every day and sets a new standard for partnership in the industry.
We’re united in our commitment to customers and grounded in our values, which
earned us a place on the Forbes Best Start-up Employers 2022 list.  If our
mission resonates with you, let’s talk.

  

 **What We Believe In**

\- Do what’s right for the customer

\- Be kind and authentic

\- Deliver great quality

\- Be relentless

  

**Challenges You Will Solve**

The Threat Research team is responsible for answering the question, “how does
this attack technique work and how do we detect it?” To answer this question
confidently, you will apply a formalized research methodology resulting in the
development of attack technique automation, documentation, and detection
recommendations that scale across all of our customers. You will excel in this
role as someone who: applies an adversarial mindset, is intimately familiar
with Cloud-related attack techniques, develops and validates research
hypotheses, and can communicate technical concepts in an accessible, succinct
fashion.

  

Leveraging your extensive knowledge in Cloud security concepts and adversary
attack paths, you will be a key stakeholder to continuously prioritize our
product development and detection engineering efforts. You will serve as a
technical subject matter expert on Cloud technologies at Red Canary and help
drive product strategy and implementation. You understand how to dive deep
into adversary techniques to better inform defensive decisions and communicate
those lessons with the team and broader industry. You understand how to find
and document the relevant data for making informed decisions about threats.
You also know how adversaries evade detections and you will apply your
extensive knowledge to anticipate and act on real and hypothetical evasion
opportunities. You’ve performed research in the past and understand its place
in producing practical, operational deliverables. You ask really good
questions, maintain focus, thrive in transforming ambiguity into confidence,
and you are firmly grounded in reality, with a focus on operationalizing your
research. You will be relied upon as a subject matter expert who understands
adversary trends and who can get their hands dirty by understanding and
replicating adversary tradecraft.

### What You'll Do

  

  * Scope research initiatives and continually refine scope as needed.
  * Write attack technique automation code. Replicating attack techniques is crucial to understanding the data available to make informed detection decisions. You will specifically develop code to automate attack techniques similar to the form of our AtomicTestHarnesses module.
  * Research and analyze attack techniques related primarily to AWS Cloud services. Additional Cloud platform expertise is welcomed.
  * Document and present your research findings and deliverables in an easy to understand, actionable manner both internally and externally.
  * Work closely with detection engineers, intelligence analysts, and threat hunters to prioritize and refine your deliverables.
  * Apply an adversarial mindset to your research and detection engineering recommendations.
  * Serve as a technical mentor for those interested in pursuing research as a discipline and practice.
  * Work hard to understand the technical components and related detection optics that underlie a technique. In doing so, you will also comprehend the extent to which adversaries can exercise control over variations of the researched technique.
  * Collaborate across Red Canary to develop new detection methodologies.

  

### What You'll Bring

  

  * 5+ years of experience conducting security research with actionable outcomes. 
  * Experience working with commercial Endpoint Detection & Response (EDR) and/or Cloud-based detection platforms.
  * Software development experience in at least one scripting language (e.g. PowerShell, Python, etc.) and/or one compiled language (e.g. Go, Ruby, .NET, Rust, etc.).
  * Extensive security experience in AWS and its available data source for optics and detection. Additional Cloud platform expertise is welcomed.
  * Have an established record of public, community engagement (conference talks, blog posts, or webinars, etc.)
  * Experience managing code with git/GitHub.
  * Understands the role of detection engineering and threat hunting.

  

Targeted base salary: $176,600 - $195,000 + bonus eligibility and equity
depending on experience.

  

 _Benefit Highlights:_

 _-  100% Paid Premiums: _ ** _ _** _Red Canary offers a 100% paid plan option
for medical, dental and vision for you and your dependents. No waiting
period._

 _\- Health & Wellness - Access to mental health services, Employee Assistance
Program and additional programs to incentivize healthy habits.  _

 _\- Fertility Benefits: All new hires are eligible for benefits as of their
first day._

 _\- Flexible Time Off: Take the time you need to recharge including vacation,
sick, bereavement, jury duty, and holidays.  _

 _\- Paid Parental Leave-  Full base pay to bond/care for your new child._

 _\- Pre-Tax Plans -  Red Canary offers a variety of plans to fit you and your
dependent specific needs including FSA, HRA and HSA, with employer funding to
offset out of pocket health care expenses. _

 _\- Flexible Work Environment-  With 60% remote workforce, Canaries can work
virtually from almost anywhere in the US._

  

 _The application deadline is March 29th, 2024._

  

 **Why Red Canary?**

Red Canary is where people embody our mission to improve security outcomes for
all. People work hard to maintain a culture that encourages authenticity in
order to do your best work. Our people are driven and committed to finding the
best security outcomes, delivering real and actionable answers, and being
transparent along the way.

  

At Red Canary, we offer a very rich benefits program to our full-time team
members so they can focus on their families and improving our customers’
security. For a full list of benefits, please review our Benefits Summary:

https://resource.redcanary.com/rs/003-YRU-314/images/RedCanary_2024BenefitsSummary.pdf?version=0

  

 _Individuals seeking employment at Red Canary are considered without regard
to race, color, religion, national origin, age, sex, marital status, ancestry,
physical or mental disability, veteran status, gender identity, or sexual
orientation._

