Logo for Guardz

Senior Threat Researcher

Role overview

Summary

This role focuses on advanced threat research and detection engineering within Guardz's Security Research team. You will investigate complex security incidents and develop detection mechanisms while collaborating with various teams to enhance security capabilities and strategies.

Qualifications

  • 5+ years of hands-on experience in threat research, detection engineering, incident response, or advanced security operations.
  • Strong background in Tier 3 security operations, including complex incident investigations, threat hunting, and threat mitigation.
  • Deep understanding of modern attack techniques, adversary behavior, and frameworks such as MITRE ATT&CK.
  • Hands-on expertise in cloud, identity, email, and endpoint security, particularly Microsoft 365, Entra ID, and/or Google Workspace.
  • Strong scripting and analytical capabilities, including Python and SQL.

Responsibilities

  • Research emerging attack techniques, vulnerabilities, and adversarial behaviors, translating findings into effective detection rules, security controls, and response capabilities.
  • Continuously evaluate detection effectiveness, identify coverage gaps, reduce false positives, and improve detection accuracy.
  • Serve as a senior technical escalation point for Guardz's global MDR team, leading complex investigations, threat hunting, root cause analysis, and incident response guidance.
  • Develop investigation methodologies, detection strategies, and response playbooks, while mentoring and supporting analysts across our global security operations.

Key facts

Hard skills

Other skills

  • Incident Reporting
  • Communication
  • Problem Solving

About the company

Guardz logo

Guardz

  • Cybersecurity
  • Startup
  • 11–50
Guardz provides MSPs and IT professionals with an AI-driven cybersecurity platform designed to secure and insure small businesses against cyberattacks. Our unified detection and response platform safeguards users, emails, devices, cloud directories, and data. By simplifying cybersecurity management, we enable businesses to focus on growth while reducing security complexities. By combining robust cybersecurity technology and deep insurance expertise, Guardz ensures that security measures are consistently monitored, managed, and optimized to prevent the next attack and mitigate the risk. In a world that lives and breathes all things digital, every business is at risk. Cybersecurity has become a major problem for small and growing businesses due to limited budgets, resources, time, and training. Hackers are leveraging these vulnerabilities, and most of the existing cybersecurity solutions on the market are too cumbersome, too complicated, and far too costly, leaving a gap in the market. Give your customers the confidence that their business is being protected from the inside out without having to do any of the heavy lifting

Your match analysis

See how your profile stacks up against this role.

We compared the job requirements to your profile to show where you're strong and where you fall short.

Job description

Established in 2022, Guardz rapidly emerged as a noteworthy player in the cybersecurity sphere, securing $85M in funding and rallying a dedicated team of 120 industry professionals. Our vision is to foster a safer digital landscape for small and medium businesses across the globe. To this end, we introduced our comprehensive all-in-one platform, and continue to grow and expand our team, our partnerships and our revenue.

We are looking for an experienced, highly resourceful Senior Threat Researcher to join Guardz's Security Research team.

In this role, you will operate at the intersection of advanced threat research, detection engineering, and incident response, serving as a key technical escalation point for our security research teams and also for the global Managed Detection and Response (MDR) team.
You will investigate complex security incidents, uncover emerging threats, develop effective detection mechanisms, and conduct security market research to help shape our product capabilities and security strategy.
This is a highly hands-on, high-impact position for someone who thrives on solving complex problems, takes ownership, and is comfortable navigating uncharted technical territory.

Responsibilities:

  • Research emerging attack techniques, vulnerabilities, and adversarial behaviors, translating findings into effective detection rules, security controls, and response capabilities.
  • Research emerging cybersecurity technologies, competitor capabilities, market trends, and evolving attack surfaces to identify opportunities for product innovation and differentiation.
  • Continuously evaluate detection effectiveness, identify coverage gaps, reduce false positives, and improve detection accuracy.
  • Serve as a senior technical escalation point for Guardz's global MDR team, leading complex investigations, threat hunting, root cause analysis, and incident response guidance.
  • Partner with Security Research, Product, Engineering, and MDR teams to turn technical findings and field insights into scalable security capabilities.
  • Partner with Customer Success and other go-to-market teams to provide expert security guidance and technical context for customer-facing discussions involving complex incidents, findings, and response actions.
  • Develop investigation methodologies, detection strategies, and response playbooks, while mentoring and supporting analysts across our global security operations.
  • Independently explore new technologies, tools, and research methodologies to anticipate emerging threats and strengthen Guardz's security offering.

Requirements:

  • 5+ years of hands-on experience in threat research, detection engineering, incident response, or advanced security operations.
  • Strong background in Tier 3 security operations, including complex incident investigations, threat hunting, and threat mitigation.
  • Deep understanding of modern attack techniques, adversary behavior, and frameworks such as MITRE ATT&CK.
  • Hands-on expertise in cloud, identity, email, and endpoint security, particularly Microsoft 365, Entra ID, and/or Google Workspace.
  • Experience developing, testing, and optimizing detection logic within SIEM, EDR, XDR, or similar security platforms.
  • Strong scripting and analytical capabilities, including Python and SQL.
  • Experience researching AI-driven threats, agentic AI security, or AI-powered detection and response.
  • Broad knowledge of cybersecurity technologies, attacker methodologies, and the modern security vendor landscape.
  • Strong communication skills and the ability to explain sophisticated technical concepts to both technical and non-technical stakeholders.

Related jobs

See all Cyber Threat Intelligence Analyst jobs