Senior Threat Researcher

Join Illumio, a leader in cybersecurity innovation. As a Senior Threat Researcher, you will analyze large-scale security datasets, map real-world adversary activity, and collaborate closely with product teams to enhance detection and strategic direction. This role offers a unique opportunity to impact how global organizations defend against advanced cyber threats.

• Analyzing large-scale security datasets to identify attacker behaviors, patterns, TTPs, and emerging risks.
• Mapping observed behaviors to the MITRE ATT&CK framework and real-world adversary tradecraft, and leveraging the security graph to model attack paths.
• Partnering closely with Product and Engineering teams to translate research findings into concrete improvements, including enhanced detection logic and analytics.
• Committed to delivering practical defenses that protect customers from sophisticated attacks
• Comfort working in ambiguous environments and helping define new functions
• Pragmatic — focused on turning research into real product impact and measurable risk reduction
• Deep familiarity with the MITRE ATT&CK framework and real-world TTP mapping
• Excellent written and verbal communication skills, with the ability to translate complex findings into clear, actionable insights
• Collaborative and influential, thriving in a fast-paced product development environment where your insights directly shape product direction
• Curious and hypothesis-driven, with a passion for digging into raw data to uncover meaningful signals
• Strong understanding of attacker tradecraft across enterprise, cloud, and hybrid environments
• Experience writing detection rules, analytics queries, or conducting threat hunting
• Hands-on experience working with security telemetry sources
• 5+ years of experience in threat research, incident response, detection engineering, or adversary emulation
• Able to move fluidly between deep technical analysis and high-level business implications
• 7–10+ years in threat intelligence or security research roles
• Experience analyzing security graphs or graph-based analytics for threat detection
• Background in network segmentation, zero-trust architecture, or micro-segmentation
• Proven ability to influence product development in a fast-paced environment
• Track record of publishing threat research or speaking at industry conferences
• Previous experience at a cybersecurity product company
• Experience integrating external threat intelligence feeds
• Relevant certifications (e.g., GCIH, GCFA, or similar)