Research container, Kubernetes, and cloud-native attack techniques
Develop detections for runtime, syscall, process, file, and network threats
Build mitigation strategies for container and cloud security risks
Analyze malware, exploits, and adversary behavior in Linux environments
Create and optimize detection rules using threat intelligence and behavioral analytics
Develop automation for threat simulation, testing, and validation
Work with eBPF, runtime security tools, and cloud telemetry for threat monitoring
Improve detection accuracy and reduce false positives using AI-driven automation
Validate exploits and execute PoCs in containerized environments
Collaborate with engineering and security teams to enhance detection coverage
Write technical blogs, research reports, and security documentation
Required Technical Skills
3+ years of hands-on security engineering experience
Expertise in cloud threat research and detection engineering
Strong knowledge of exploit development, reproduction, CVE analysis, and vulnerability research
Experience with SOC, XDR, and cloud-native detection platforms
Deep understanding of: Containers and Kubernetes security
Linux internals and OS concepts
AWS, Azure, and GCP
Docker and containerd runtimes
Hands-on experience in: Threat research and exploit analysis
Runtime security and detection engineering
Malware analysis and MITRE ATT&CK mapping
Incident detection and mitigation
Red Teaming and Adversary Simulation
Experience with eBPF, syscall monitoring, and tools like Tetragon
Strong understanding of detection tuning and noise reduction strategies
Strong scripting skills in Python, Bash/Shell, and Go (preferred)
Experience building AI-powered security automation and LLM-driven workflows
Knowledge of security analytics and behavioral detection techniques
Experience with Git, CI/CD pipelines, and automation frameworks
Contributions to security research, blogs, or open-source projects preferred
Soft Skills & Attributes
Strong analytical and problem-solving skills.
Passion for cloud and container security research.
Ability to independently drive research initiatives.
Strong collaboration and communication skills.
Continuous learner with interest in emerging threats and AI-driven security innovation.
Requirements
Kubernetes hardening experience.
Knowledge of kernel security mechanisms.
Additional Information
Come work at a place where innovation and teamwork come together to support the most exciting missions in the world!
Brief Description
We are looking for a highly skilled Senior Cloud Threat Research Engineer with strong expertise in container security, exploit research, threat detection, and mitigation engineering. This role involves researching emerging attack techniques, developing advanced detections, building automation using scripting, and leveraging AI-driven security tools to improve cloud and container security posture.
Qualys · Pune, India