Conduct deep endpoint threat research, including malware reverse engineering, attacker techniques, exploitation, defense evasion, persistence, and emerging threats. Investigate false positives, false negatives, missed detections, and customer escalations and use findings to improve MDE protection quality. Analyze MDE telemetry, malware samples, threat intelligence, customer incidents, and hunting data to identify new attack patterns and protection gaps. Own detection work end to end, from threat hypothesis and technical analysis through implementation, testing, deployment, monitoring, and tuning. Use AI and agentic workflows to automate investigation, enrichment, malware analysis, detection development, testing, and validation while retaining researcher judgment for final decisions. Drive cross-team work when resolving a protection gap requires changes across research, telemetry, engineering, or product boundaries. Doctorate in Statistics, Mathematics, Computer Science, Computer Security, or related field OR Master's Degree in Statistics, Mathematics, Computer Science, Computer Security, or related field AND 3+ years experience in software development lifecycle, large-scale computing, threat analysis or modeling, cybersecurity, vulnerability research, and/or anomaly detection OR Bachelor's Degree in Statistics, Mathematics, Computer Science, Computer Security, or related field AND 4+ years experience in software development lifecycle, large-scale computing, threat analysis or modeling, cybersecurity, vulnerability research, and/or anomaly detection These requirements include, but are not limited to the following specialized security screenings: Candidates must have an active TS/SCI and be willing and eligible to upgrade to TS/SCI (with polygraph). This role will require candidates to maintain the TS/SCI (with polygraph) clearance. Failure to maintain or obtain the appropriate clearance and/or customer screening requirements may result in employment action up to and including termination.

Clearance Verification:

This position requires successful verification of the stated security clearance to meet federal government customer requirements. You will be asked to provide clearance verification information prior to an offer of employment.

Citizenship & Citizenship Verification:

This position requires verification of U.S. citizenship due to citizenship-based legal restrictions. Specifically, this position supports United St ates federal, state, and/or local United States government agency customer and is subject to certain citizenship-based restrictions where required or permitted by applicable law. To meet this legal Doctorate in Statistics, Mathematics, Computer Science, Computer Security, or related field AND 3+ years experience in software development lifecycle, large-scale computing, threat analysis or modeling, cybersecurity, vulnerability research, and/or anomaly detection OR Master's Degree in Statistics, Mathematics, Computer Science, Computer Security, or related field AND 6+ years experience in software development lifecycle, large-scale computing, threat analysis or modeling, cybersecurity, vulnerability research, and/or anomaly detection OR Bachelor's Degree in Statistics, Mathematics, Computer Science, Computer Security, or related field AND 8+ years experience in software development lifecycle, large-scale computing, threat analysis or modeling, cybersecurity, vulnerability research, and/or anomaly detection OR equivalent experience.