Threat Researcher

About the Role

Security Joes is looking for a Threat Researcher to join our global Blue Team and help monitor, investigate, and respond to real-world cyber threats.

You’ll analyze live attacks, support incident investigations, participate in threat hunting, and help develop the tools and detection capabilities that protect our clients. You’ll work alongside experienced researchers in areas such as malware analysis, penetration testing, exploit research, and reverse engineering, with opportunities to learn and make a direct impact on both our defensive work and research.

This role is a good fit for someone with a few years of hands-on experience who is ready to deepen their skills in a practical, fast-moving cybersecurity environment.

What You’ll Do

• Monitor security technologies for alerts and suspicious activity.
• Investigate incidents, collect threat indicators, and support attribution analysis.
• Participate in threat hunting and malware analysis.
• Develop and improve detection rules and threat visibility.
• Support internal research tools and manage scripts and code in GitHub.
• Work with clients and their security teams during incident response.
• Learn and apply reverse engineering and incident response methods with guidance from senior researchers.
• Document findings and contribute to internal knowledge sharing and threat intelligence reports.

What You’ll Bring

• 2–4 years of hands-on experience in threat research, SOC, MDR, or incident response.
• Experience working with EDR/XDR platforms and analyzing logs or security events.
• Familiarity with cloud and hybrid environments.
• Basic experience with malware analysis and scripting, such as Python or PowerShell.
• Familiarity with GitHub and version control.
• Understanding of detection rules and tools such as YARA or Sigma; hands-on experience is a plus.
• Strong analytical, communication, and documentation skills.
• High-level English proficiency, both written and spoken.

A degree in Computer Science, or relevant certifications such as SANS GCIH/GREM or Zero2Auto, is a plus.

Bonus Points

• Contributions to the cybersecurity research community, such as blog posts, GitHub projects, or threat intelligence write-ups.
• An interest in public speaking, knowledge sharing, or delivering training.

About Security Joes and JOES AIR

Security Joes provides global Managed Detection & Response, incident response, forensics, Red Team operations, and other security services. Our teams work with organizations around the world to investigate and respond to complex cyber threats.

We’re also building JOES AIR (Autonomous Investigations & Response), our SecOps platform. AIR brings AI-supported capabilities into investigation and response workflows, combining automation with human expertise and oversight. The platform builds on our hands-on experience in incident response and MDR, and reflects our goal of helping security teams manage investigations as connected, context-aware processes.

Join a global, remote team of cybersecurity practitioners and help us protect organizations while continuing to grow your research and response skills.