Senior Security Researcher, Huntress
$160-180k
+ Bonus + Equity
Managed cyber security platform for SMBs
Be an early applicant
Managed cyber security platform for SMBs
501-1000 employees
Be an early applicant
$160-180k
+ Bonus + Equity
501-1000 employees
Company mission
To elevate SMBs through education and community — one hacker at a time.
Role
Who you are
- Competitive candidates have experience managing, deploying, and securing SMB environments utilizing a wide variety of security software, best practices, and automation tools
- Familiarity with product management, incident response, social engineering, psychology, education, and managed service provider tools are additional ways to differentiate yourself
- Knowledge and technical expertise in Google ecosystem including: logs, APIs, multi-tenant environments, especially supporting MSPs, Google Workspace editions, and business plans with the ability to maximize value across business plan levels, GCP; security products such as: Chrome Enterprise, BeyondCorp, Google Identity Premium, and Google Vault
- Experience configuring and leveraging Google Workspace organizational units (OUs), group permissions, settings & APIs, including Gmail, Drive, Calendar, Takeout, & Docs scripting engine
- Experience configuring and leveraging Google Workspace security policies, including SSO, two-factor authentication, password policies, and data loss prevention (DLP) to protect sensitive information
- Experience with Google Chronicle and/or Vault
- Experience managing security settings like configuring email security, spam filtering, malware detection, and phishing protection
- Expertise in implementing, managing, and bypassing SSO, MFA, and identity governance across complex organizational structures
- Red team experience, coursework, training, certifications
- Proof of Concept (POC) development
- Comfortable reading API documentation for SaaS applications and programming languages
- Experience with MSP environments and IT automation tools such as PSAs and RMMs preferred
- Security conference presenters and community educators preferred
- Incident responder in Google environment incidents a plus
- Experience with conducting searches and creating visualizations in Elastic and Kibana is a plus
- Experience with Identity and Access Management (IAM) concepts and tools a plus
- Google Workspace Administrator, Google Cloud, GRTE Certifications a plus
- Experienced Cyber Network Operator, Computer Network Operator, Cyber Technical Operator Targeter, or other similar career fields a plus
What the job involves
- Reports to: Director, Product Research
- Do you like getting into the weeds on all things technical, psychological, and educational and have a desire to know how things work? Then this is the position for you. We are looking for that jack of all trades who brings broad experience to each challenge presented
- The Huntress Security team has the unique honor of waking up every morning knowing we will make hackers regret targeting our partners and customers
- As a Security Product Researcher, we’re looking for someone who wants to pour all of their creativity into building and implementing simple solutions that are disproportionately effective at countering these constantly evolving threats
- An effective Security Researcher fosters highly collaborative environments between the Product, Engineering, and Security teams to accelerate our mission and secure the 99% of businesses that fall below the enterprise poverty line
- This collaboration is needed to produce and prioritize a unified technical vision delivering our most impactful features and capabilities
- Produce security Capabilities we bring to market, owning the layered defense strategy gained by combining multiple data sources and security strategies
- Investigate identity compromise, initial access, authentication logins, and subsequent access to understand, document & combat attacker behavior
- Hunt threat actors in Google Workspace, AuthN, AuthZ, OAuth, & token authentication audit logs to determine Google environment initial access, abuse, and persistence
- Test attack paths, exploitation of vulnerabilities, and misconfigurations. Hunt and solve for identity hijacking via discovering exploitation of vulnerabilities and misconfigurations. Convert vulnerability testing findings into reliable and weaponized Proof-of-Concept (PoC) exploits for identified vulnerabilities. Hack to FIX things. Know how to break in and devise innovative fixes. Discover technical innovations to protect against attacks. Rapidly operationalize prototypes in the open to collect fast feedback and iterate toward product success
- Identify and prototype telemetry data that can be leveraged within Huntress to expand current prevention, hardening, and detection capabilities
- Analyze and reverse engineer software to discover security weaknesses and undocumented features
- Distinguish between suspicious and malicious login events and user behavior to reach the highest accuracy true positive rate
- Document research findings through technical write-ups, advisories, internal reports, and blogs
- Elevate and nurture the cross-department relationships critical for successful product delivery & launch. Coordinate with Security, Product, and Engineering teams to integrate and operationalize security solutions. Build high-trust, high-value relationships with product leads
- Proven organizational and program management skills, with keen attention to detail and a sense of urgency to deliver an exceptional product under tight deadlines
- Eagerness to engage, report, and be accountable to executive stakeholders. Enthusiasm to give and receive radical candor, challenge and be challenged in high speed cross-company engagements with hunger to deliver excellence and minimal ego
- Promote your expertise and brand to generate impactful security outcomes for businesses and the security community via media interaction, conference presentations, public speaking, and blogs with a commitment to educating on how to be security savvy in novel and fun ways
Our take
In a world of increasingly sophisticated cyberthreats, many SMBs don’t have the resources to protect themselves. Huntress addresses the need for robust cybersecurity solutions for small to medium sized businesses, which make up 99% of the US business landscape.
The company offers a managed security platform, which third party resellers leverage to protect their clients from attacks. Launched in 2015, Huntress has grown well over the years, attracting plenty of investment and expanding its headcount into the hundreds.
In recent years, Huntress has turned its eye to acquisitions and new product launches, as well as major international expansion. A considerable influx of funding will support these initiatives, as well as allow the company to maintain sales momentum by expanding its go-to-market efforts.
Steph
Company Specialist at Welcome to the Jungle
Company
Funding (last 2 of 6 rounds)
Jun 2024
$150m
SERIES D
May 2023
$60m
SERIES C
Total funding: $289.8m
Company benefits
- 100% Remote: We’ve been a remote team from day one—and we’ve got the tools, systems and processes to be successful from anywhere in the world.
- PTO & Parental Leave: We offer 12 weeks of paid parental leave, along with vacation, sick time and floating holidays.
- 401K Match: We offer a 5% contribution to your 401k—even if you’re not paying into it yourself.
- Growth Opportunities: We’re super committed to employee development, both within and outside of Huntress – including education assistance programs, hands-on training and more.
- Health Benefits: Medical, dental, vision, and everything you’d expect from a company that cares about its team members.
- Stock Options: All full-time employees get stock options and benefit from the continued growth and success of the company.
Company values
- Lead With Transparency - We're approachable, we readily share information and we set clear expectations in everything we do. We're not afraid to fail and we constantly test and learn
- Challenge Assumptions - We don't follow the norm and we ask "why?" often. We're open to new ideas and feedback, we seek out different opinions and consider the impact of our decisions
- Embrace Diversity - We celebrate our differences, have empathy for others and make sure each of our voices are heard. We welcome anyone to help us take hackers down
- Integrity Above All Else - We foster trust by being responsible and accountable—both internally and within the community. We recognize our strengths and our gaps, and we keep our word
Company HQ
Ellicott City, MD
Articles
Leadership
Kyle Hanslovan
(Co-founder & CEO)Spent nine years as a Cyber Warfare Operator for Air National Guard, and seven years as an Information Assurance Officer for the United States Air Force. Co-founded and was CEO of boutique cyber security company StrategicIO, and was a Senior Cyber Vulnerability Analyst at ManTech International Corporation.
Chris Bisnett
(Co-founder & CTO)US Navy Veteran, serving for five years as a Vulnerability Analyst focused on the Department of Defense network. Operated in a number of Senior Security Engineering roles after leaving the Navy. Former CTO of LegalConfirm.com (acquired by Capital Confirmation, 2014).
John Ferrell
(Co-founder)Spent five years as a Security Engineer and CNO Analyst over two spells at ManTech International, with one year as a Linux Systems Engineer at SPARTA in the interim. Was a CNO Developer at StrategicIO before co-founding Huntress.
Share this job
View 11 more jobs at Huntress