Senior Security Researcher

Summary

Join BeyondTrust as a Senior Security Researcher and contribute to our identity security platform by applying your security research expertise and strong engineering skills to detect and prevent identity-based threats. You will work closely with a team of security researchers and engineers to implement detection capabilities, analyze security data, and translate research insights into our production systems. This role offers the opportunity to grow your expertise in identity security while tackling challenging technical problems, pursuing novel research directions, and sharing your expertise with the broader security community. We seek someone who thrives on solving complex problems, values engineering excellence, and desires to make a meaningful impact on the future of cybersecurity. This position involves research and analysis, engineering and development, data analysis and tuning, and collaboration and growth.

Requirements

• Strong programming skills in Python with experience in data processing and analysis
• Experience with SQL and working with large datasets
• Background working with SIEM tools, security logs, or similar security data platforms
• Understanding of security threats, attack techniques, and defensive strategies
• Experience building or maintaining detection systems or security analytics
• Ability to work with big data tools and distributed computing concepts

Responsibilities

• Support security research initiatives to identify identity attack patterns and develop detection approaches
• Implement analytics including rule-based detection, behavioral analysis, and machine learning models for threat identification
• Contribute to our entitlement graph systems that analyze privilege escalation paths
• Help develop recommendation systems that identify security misconfigurations in customer environments
• Build and maintain detection systems with focus on reliability and performance
• Implement detection pipelines using PySpark, Spark SQL, and big data processing tools
• Create data representations and analysis tools to support advanced detection capabilities
• Apply engineering best practices including testing, code reviews, and documentation
• Analyze customer datasets using Spark and other tools to test and validate detection hypotheses
• Monitor detection performance and tune algorithms based on field telemetry and feedback
• Work with data science team to integrate machine learning models into detection systems
• Optimize queries and data processing for improved system performance
• Work with product and engineering teams to implement threat detection capabilities
• Participate in research discussions and contribute to technical decisions
• Present findings internally and potentially at conferences or in blog posts
• Stay current with security trends and emerging threat landscapes

Preferred Qualifications

• Experience with Apache Spark, PySpark, or Databricks
• Background in security research or interest in pursuing research activities
• Knowledge of cloud security and modern infrastructure technologies
• Experience with graph analysis or network security concepts
• Familiarity with machine learning applications in security
• Interest in conference speaking or technical writing