← All roles

Principal Security Researcher - EDR (Windows)

Huntress· Product Research
Apply on company site
Remote$200k - $230kfull-timePosted 3mo ago

About the role

Principal Product Researcher role focused on building and implementing effective Windows OS threat detection, leveraging telemetry, automation, and AI to counter evolving threats for Huntress’ SMB-focused customer base.

Responsibilities

  • Identify innovative ways to detect Windows OS threats
  • Develop cross-platform features that leverage telemetry from common OS subsystems such as file system, memory, process, and network activity
  • Research and development of sensor capabilities to provide visibility and detection support for attack techniques across supported Windows OS versions
  • Work collaboratively with internal engineering and detection teams to implement detection logic
  • Identify and evaluate new telemetry opportunities
  • Identify and address gaps in product coverage
  • Respond to product escalations
  • Perform False Positive and False Negative investigations
  • Lead product research initiatives to develop and evaluate security product strategies and technologies
  • Coordinate with Product and Engineering teams to integrate and operationalize solutions developed by Threat Operations teams
  • Applies AI as a practical part of day-to-day product research work to improve the speed, quality, and impact of research outputs
  • Uses AI to support information gathering, analysis, prototyping, and production of clear, decision-useful work products while maintaining accountability for the final output
  • Builds and reuses lightweight prompts, templates, or workflows for recurring research tasks rather than relying on one-off use
  • Develop internal and external technical documentation to educate customers and communicate research findings to adjacent teams about security risks and opportunities
  • Mentor and teach technical expertise to advance the broader community
  • Promote Huntress’ reputation through media interaction, public speaking, CFPs, CTFs, and blogs

Qualifications

  • Expert in Windows OS internals, components, APIs, and design
  • Prior experience with Windows OS kernel coding and device drivers
  • Experience testing EDRs, bypasses, and evasion techniques
  • Comfortable with reverse engineering and using debuggers
  • Proficiency in multiple programming/scripting languages, such as C/C++/C#, PowerShell, and Python
  • Applies AI to improve research quality, speed, and outputs in day-to-day work
  • Commitment to clear documentation of research findings
  • Experience with MITRE ATT&CK matrix, SIGMA, Yara, and Elasticsearch/Kibana

Skills

Required:Windows OS internalsWindows OS kernel codingEDR testing and evasion techniquesReverse engineeringProgramming languagesAI applications in researchDocumentationMITRE ATT&CK/SIGMA/Yara/Elasticsearch

Benefits

  • 100% remote work environment
  • Generous paid time off policy including vacation, sick time, and holidays
  • 12 weeks of paid parental leave
  • Medical, dental, and vision benefits
  • 401(k) with 5% company contribution
  • Life and Disability insurance
  • Stock options for all full-time employees
  • One-time $500 home office stipend
  • Annual education and professional development allowance
  • $75 USD/month digital reimbursement
  • Access to BetterUp coaching platform
Last updated Oct 22, 2026. Interested? Apply on the company site.

About Huntress

Enterprise-grade cybersecurity for ALL businesses.

Stop cyberattacks with the Huntress Managed Platform. Get 24/7 SOC-backed EDR, ITDR, SIEM, & Security Awareness Training for enterprise-grade protection across all your environments

cybersecurityendpoint protectionEDRITDRSIEMSecurity Awareness Training
Company profileWebsite

More open roles at Huntress