Teams at Huntress

Lead macOS security research, including Endpoint Security API telemetry, malware reverse engineering, attack emulation, EDR bypass research, and proof-of-concept development. Collaborate with Detection Engineering, Product, and Engineering to operationalize findings, track Apple platform changes, improve detection coverage, document risks, and mentor teammates. The role also involves building ephemeral research infrastructure and representing the company through technical publications, speaking, and media engagement.

Research and simulate emerging phishing and social-engineering attacks for a security awareness training product. Build realistic phishing emails and landing pages using web technologies, analyze reported incidents and attack trends, automate content generation with AI coding tools, and expand training globally. The role also creates educational content, reports threat insights, supports outreach, and collaborates with product leadership to improve phishing defense outcomes.

Build and operate an agentic SOC investigation platform using LLMs, including telemetry tools, investigation workflows, evidence-backed outputs, evaluation systems, and analyst productivity features. Develop secure, reliable, observable backend services that handle attacker-influenced data across customer environments. Collaborate with SOC analysts, researchers, technical leads, and product managers to translate investigative expertise into production agent behavior.