Latest AI JobsBrowse Jobs
Huntress logo

Principal Security Researcher - EDR (Windows)

HuntressUnited States of AmericaProduct Research
Apply on company site
Salary
$200K - $230K USD
Job type
Full-time
Posted
17 Jul 2026
Status
Open · checked 7d ago

About this role

Huntress is hiring a remote-based Principal Security Researcher specializing in Windows EDR to discover novel threat detection methods and improve endpoint protection. This senior technical position suits an experienced cybersecurity professional with deep knowledge of Windows operating system internals and endpoint detection systems.

Role Overview

The Product Research department at Huntress invites a talented researcher to focus on countering modern cyber threats against small and mid-sized businesses. The person in this role will drive innovation in endpoint detection and response (EDR), collaborate closely with engineering and detection teams, and help protect millions of endpoints worldwide. Working from a remote environment across the United States, the researcher will balance technical creativity with practical execution to secure digital infrastructures.

Key Responsibilities

Discover innovative ways to identify and detect Windows operating system threats.
Build cross-platform features using telemetry from file systems, memory, processes, and network activity.
Research and develop sensor capabilities to provide visibility and detection support for various attack techniques across supported Windows versions.
Collaborate directly with internal engineering and detection teams to implement effective detection logic.
Evaluate new telemetry opportunities and address gaps in existing product coverage.
Respond to product escalations and investigate false positives and false negatives.
Lead product research initiatives to evaluate and develop new security technologies and strategies.
Utilize artificial intelligence tools to improve the speed, quality, and output of daily research tasks.
Produce internal and external technical documentation to educate customers and share findings with adjacent teams.
Mentor colleagues and represent the organization through public speaking, media interactions, and technical writing.

Requirements

Expert understanding of Windows operating system internals, components, APIs, and design.
Prior hands-on experience with Windows OS kernel coding and device drivers.
Background in testing endpoint detection and response systems, along with bypasses and evasion techniques.
Comfort working with reverse engineering tools and debuggers.
Proficiency in multiple programming and scripting languages, including C, C++, C#, PowerShell, and Python.
Familiarity with applying AI tools to enhance daily research tasks, prototyping, and analysis.
Demonstrated commitment to documenting research findings clearly.
Experience utilizing the MITRE ATT&CK matrix, SIGMA, Yara, and Elasticsearch or Kibana.

Nice to Have

Experience managing, deploying, and securing small business environments with diverse security software and automation tools.
Familiarity with product management, incident response, social engineering, psychology, education, and managed service provider tools.

Skills and Tools

Windows OS Internals and Kernel Coding
C, C++, C#, PowerShell, and Python
Reverse Engineering and Debugging
EDR Testing and Bypasses
MITRE ATT&CK, SIGMA, Yara, Elasticsearch, and Kibana
AI-assisted Research Workflows

Salary and Benefits

Base compensation range spanning from $200,000 to $230,000 per year, plus bonus and equity.
100% remote work environment.
Generous paid time off policy covering vacation, sick time, and paid holidays.
12 weeks of paid parental leave.
Comprehensive medical, dental, and vision insurance plans.
401(k) retirement plan with a 5% company contribution regardless of employee contribution.
Life and disability insurance plans.
Stock options provided for full-time employees.
One-time $500 home office setup reimbursement alongside an annual education and professional development allowance.
Digital reimbursement of $75 per month.
Access to the BetterUp platform for personal and professional growth coaching.

About the Company

Founded in 2015 by former NSA cyber operators, Huntress is a remote-first cybersecurity organization dedicated to making enterprise-grade protection accessible to businesses of all sizes. The company builds proprietary technology backed by a 24/7 human-led Security Operations Center, currently securing more than 5 million endpoints and 14 million identities globally.

How to Apply

Interested candidates should submit their application directly through the official company careers page.

Skills and tech stack

Questions candidates ask

Is this position fully remote?

Yes, this is a 100% remote position based in the United States.

What is the salary range for the Principal Security Researcher role?

The base compensation ranges from $200,000 to $230,000 per year, plus bonus and equity.

What programming languages are required?

Proficiency in multiple programming and scripting languages is required, specifically C, C++, C#, PowerShell, and Python.

What technical background is needed for this role?

Candidates must have expert knowledge of Windows OS internals, components, APIs, and design, along with prior experience in Windows OS kernel coding and device drivers.

What benefits are included with employment?

Benefits include comprehensive medical, dental, and vision plans, a 401(k) with a 5% company contribution, 12 weeks of paid parental leave, stock options, a home office setup reimbursement, and annual professional development allowances.

Ready to apply?

The application is on the official Huntress careers page.

Apply on company site