Staff Security Researcher

Summary

Join BeyondTrust as a Staff Security Researcher and drive the evolution of our identity security platform. You will combine cutting-edge security research with robust engineering practices, translating research findings into production-ready systems. This role offers the opportunity to shape the future of identity security through innovative research and thought leadership. You will have the freedom to pursue novel research directions and the resources to implement your ideas at scale. We seek someone who thrives on solving hard problems, values engineering excellence, and wants to make a meaningful impact on cybersecurity.

Requirements

• Strong engineering background with proven experience developing and maintaining production security systems
• Strong Python programming skills with experience in large-scale data processing
• Proficiency in SQL and database optimization techniques
• Experience working with SIEM tools, log analysis platforms, or similar security data systems
• Knowledge of adversarial tactics, techniques, and procedures (TTPs) and corresponding defensive strategies
• Experience in engineering event detection and response systems with focus on tuning and optimization

Responsibilities

• Conduct original security research to identify emerging identity attack vectors and develop novel detection methodologies
• Design and implement advanced analytics including rule-based systems, behavioral analysis, and machine learning models for threat detection
• Expand and optimize our large-scale entitlement graph systems that map privilege escalation paths across customer environments
• Develop proactive recommendation engines that identify security misconfigurations before they become attack vectors
• Build production-grade security systems with emphasis on scalability, reliability, and performance optimization
• Implement and maintain detection pipelines using PySpark, Spark SQL, and distributed computing frameworks
• Design custom data representations (graphs, time-series, etc.) to support advanced analytical capabilities
• Establish engineering best practices including comprehensive unit testing, automation, and CI/CD pipelines
• Explore large-scale customer datasets using Spark and Databricks to validate detection hypotheses and uncover new threat patterns
• Continuously monitor and tune detection algorithms based on real-world telemetry and performance metrics
• Collaborate with data science teams to integrate machine learning models into production detection systems
• Optimize system performance to handle massive data volumes efficiently

Preferred Qualifications

• Big data processing experience with Apache Spark, Databricks, or similar distributed computing platforms
• Background in security research with published findings or conference presentations
• Knowledge of cloud security, containerization, and modern infrastructure technologies
• Experience with graph databases and network analysis techniques
• Familiarity with machine learning applications in cybersecurity
• Track record of speaking at technical conferences or contributing to security research publications