Remote opportunity at
HuntressPrincipal Security Researcher - EDR (Windows)
Huntress seeks a Principal Security Researcher specializing in Windows Endpoint Detection and Response (EDR) to help protect small and mid-sized businesses. Founded by former NSA cyber…
Career Tools
About This Role
Huntress seeks a Principal Security Researcher specializing in Windows Endpoint Detection and Response (EDR) to help protect small and mid-sized businesses. Founded by former NSA cyber operators, the company provides automated security platforms backed by a 24/7 human-led Security Operations Center. In this remote position, the researcher will focus on uncovering novel threat detection methods, designing cross-platform features, and evaluating security strategies. The ideal candidate possesses deep expertise in Windows…
Job Description
Huntress seeks a Principal Security Researcher specializing in Windows Endpoint Detection and Response (EDR) to help protect small and mid-sized businesses. Founded by former NSA cyber operators, the company provides automated security platforms backed by a 24/7 human-led Security Operations Center. In this remote position, the researcher will focus on uncovering novel threat detection methods, designing cross-platform features, and evaluating security strategies.
The ideal candidate possesses deep expertise in Windows operating system internals, kernel coding, and evasion technique testing. The role requires collaborating closely with product, engineering, and detection units to operationalize solutions, build sensor capabilities, and address detection gaps. The position also involves leveraging artificial intelligence tools to accelerate day-to-day research, producing technical documentation, mentoring colleagues, and representing the organization through public speaking and community engagement.
Compensation for this full-time role includes a base salary between $200,000 and $230,000 per year, accompanied by bonuses, equity, health benefits, a 401(k) plan with a 5% employer contribution, paid parental leave, flexible time off, and various allowances for home office setups, professional development, and digital services.
Responsibilities
- Discover innovative approaches to detect threats targeting the Windows operating system
- Design and build cross-platform capabilities utilizing telemetry from OS subsystems such as memory, filesystems, processes, and networks
- Research and develop sensor features that ensure visibility into various attack techniques across supported Windows versions
- Partner with engineering and detection groups to implement accurate detection logic
- Evaluate new telemetry sources and resolve product coverage limitations
- Investigate product escalations along with false positives and false negatives
- Steer research initiatives aimed at shaping security product strategies and technology
- Coordinate with product and engineering units to integrate outputs originating from threat operations
- Utilize artificial intelligence to optimize research speed, analysis, information gathering, and prototype production
- Create internal and external technical documentation to educate users and share findings
- Mentor technical personnel and share expertise with the broader security community
- Engage in public speaking, media interactions, and community events to support company reputation
Requirements
- Deep expertise in Windows operating system internals, design, components, and APIs
- Past background writing Windows OS kernel code and working with device drivers
- Practical experience testing EDR systems, evasion techniques, and bypass methods
- Familiarity using debuggers and performing reverse engineering
- Fluency in scripting and programming languages including C, C++, C#, Python, and PowerShell
- Demonstrated ability to integrate artificial intelligence into daily research tasks
- Proven dedication to producing clear documentation for all research results
- Working knowledge of the MITRE ATT&CK framework, SIGMA, Yara, and Elasticsearch or Kibana
Core Skills
Benefits
- Generous paid time off policy covering vacation, sick leave, and holidays
- 12 weeks of paid parental leave
- Comprehensive medical, dental, and vision insurance plans
- 401(k) retirement plan featuring a 5% contribution regardless of employee contribution
- Life and disability insurance coverage
- Stock options for all full-time team members
- One-time $500 home office setup reimbursement
- Annual allowance dedicated to professional development and education
- Monthly digital stipend of $75 USD
- Access to the BetterUp coaching platform for personal and professional growth
Frequently Asked Questions
Answers are based only on the employer’s listing; where it doesn’t say, neither do we.
What is the salary range and compensation structure for this position?
The base salary ranges from $200,000 to $230,000 per year, which is supplemented by bonus opportunities, equity options, and a comprehensive benefits package.
Is this a remote role?
Yes, this position operates within a 100% remote work environment.
What are the core technical requirements for this role?
Candidates must have expert knowledge of Windows OS internals, APIs, and components, along with experience in kernel coding, device drivers, EDR testing, reverse engineering, and programming languages such as C, C++, C#, Python, and PowerShell.
How can applicants request accommodations during the hiring process?
Candidates needing reasonable accommodations for the application, interview, or testing phases can email inquiries to accommodations@huntresslabs.com.
Sample Interview Questions
AI-generated questions tailored to this specific role — a preview of the full practice set.
