[Hiring] Associate Security Researcher @Trellix

Role Description

Responsible for secure design, development and operation of hardware and software products and services. Responsibilities may include:

• Threat assessment
• Design of security components
• Vulnerability assessment

Ensures products conform to standards and specifications. Develops plans and cost estimates and assesses projects to analyze risks. Responds to customer/client requests or events as they occur. Develops solutions to problems utilizing formal education, judgment and formal process. Maintains substantial knowledge of state-of-the-art security principles, theories, attacks and contributes to literature and conferences. May participate in development or intellectual property. Requires thorough knowledge of security practices, procedures and capabilities in order to perform non-repetitive, analytical work.

Qualifications

• 0–2+ years of experience in Python or backend software development, with a strong interest in security research and automation.
• Solid understanding of Linux and/or Windows operating system fundamentals and internals.
• Foundational understanding of cybersecurity concepts, malware behavior, common vulnerabilities (CVEs, OWASP), and threat analysis.
• Familiarity with threat detection mechanisms and rule formats (such as YARA, Sigma, Snort, or behavioral signatures).
• Exposure to static/dynamic malware analysis, sandboxes (e.g., Cuckoo/CAPE), or reverse engineering tools (Ghidra, IDA) through coursework or CTFs.
• Excellent development and debugging skills in Python (or Go / C++).
• Strong grasp of data structures, algorithms, and software design patterns.
• CI/CD pipeline experience (Git, GitHub Actions, or equivalent).
• Strong written communication for technical documentation and async collaboration.
• Ability to learn quickly and operate effectively in a fast-moving environment.
• Hands-on experimentation with Large Language Models (LLMs) and agentic workflows.
• SQL / Relational databases such as Postgres or MySQL.
• Cloud services familiarity (AWS or GCP).
• Logging, telemetry, and monitoring tools.
• Passion for threat intelligence, automated detection engineering, and scaling security research through software.
• Excellent communication and collaboration skills with the ability to work effectively across engineering, product, and security research teams.
• Ability to communicate technical concepts clearly to both engineering and research stakeholders.
• Strong analytical mindset, high coachability, and curiosity for solving complex security challenges through code.

Benefits

• Retirement Plans
• Medical, Dental and Vision Coverage
• Paid Time Off
• Paid Parental Leave
• Support for Community Involvement