Staff Threat & Attack Research Engineer

Job description

Job responsibilities

• Monitor and analyze sophisticated cyber threats targeting Anduril's products, infrastructure, and personnel.
• Research, mitigate, and anticipate emerging technical trends in the threat landscape.
• Collaborate closely with the detection and response team to provide timely and actionable intelligence to support ongoing investigations.
• Engage cross functionally with the offensive security team on product and infrastructure red team engagements.
• Enhance tooling for threat actor tracking and intelligence data integration.
• Foster proactive collaboration and information exchange with external partners to build joint capabilities and achieve shared objectives.

Job requirements

• Proven experience analyzing complex threat actor campaigns, including supply chain and infrastructure, with the ability to develop long term countermeasures.
• Proficiency in one or more programming languages (e.g. Python, Rust, Golang, Swift)
• Capacity to prioritize and execute tasks independently with minimal supervision.
• Strong and professional communication skills (written and verbal)
• Ability to obtain and hold a U.S. Secret security clearance.
• In-depth knowledge of nation-state, sophisticated criminal, or supply chain threats.
• Experience creating file-based or network-based rules and signatures (e.g. YARA, Snort) for detection and tracking complex threats.
• Track record of writing production code for threat intelligence tools