Security Research Engineer III

About this role

SpyCloud is on a mission to make the internet a safer place by disrupting the criminal underground. SpyCloud’s solutions thwart cyberattacks and protect more than 4 billion accounts worldwide. Cybersecurity is an exciting, evolving space, and being at the forefront of the fight to disrupt cybercrime makes SpyCloud a special place to work. If you’re driven to align your career with a fantastic mission, look no further! The ideal candidate possesses a strong understanding of building internal security tooling and data pipelines using public cloud infrastructure.

This role will be within SpyCloud Labs, SpyCloud’s in-house Security Research team, and focus on building automation and other internal tooling to facilitate the collection of recaptured third-party breach and malware data. This is a full-time remote role supporting a hybrid workforce. What You'll Do: Design, implement, and maintain internal tooling for acquiring and parsing recaptured underground data. Build and deploy cloud infrastructure using Infrastructure as Code technologies.

Build and deploy automated CI/CD pipelines to test and deploy tooling and infrastructure. Collaborate directly with the research team to support the targeting and collection of new data sources. Consistently work to identify improvements and automation opportunities in the recaptured data workflow and ETL pipelines. Participate in security research including investigation of threat actors, malware, and other critical research in support of SpyCloud’s priorities.

Requirements: 4+ years of professional software development experience, preferably in the cybersecurity industry Highly skilled with Python. Golang proficiency is a plus. Experience building internal tooling and deploying using Infrastructure as Code technologies (we use Terraform and Ansible). Bachelor’s degree, or equivalent experience, in Math, Science, Engineering, or Business fields. Self-directed with the ability to identify and deliver on tasks with minimal direct supervision.

Critical thinker that is comfortable supporting collaborative problem solving in a team environment. Excellent communication skills. Highly self-motivated, empathetic, curious, and flexible. Nice to Have: Experience working with large enterprises in delivery of security analytics products. Experience in acquiring and processing malware-exfiltrated data Experience in using data science to analyze datasets for the purposes of detecting fraud or cyberthreats.