Sysdig

Staff Threat Research Engineer

Posted 2 Days Ago

Be an Early Applicant

2 Locations

In-Office or Remote

163K-204K Annually

Senior level

Cybersecurity

The leader in real-time cloud security

The Role

The role involves researching cloud attacks, developing security solutions, authoring security content, and enhancing threat intelligence for cloud environments.

Summary Generated by Built In

At Sysdig, we believe cloud security isn't a compromise - it's a promise. From the start, our mission has been clear: to help organizations secure innovation in the cloud, the right way.

We created Falco, the open standard for cloud threat detection, and continue to lead the cloud security market with runtime insights, open innovation, and agentic Al. Creators of technology trusted by over 60% of the Fortune 500, Sysdig gives teams the real-time clarity to move fast and defend what matters most.

Culture matters here. We believe diversity fuels stronger ideas, and open dialogue drives sharper decisions. Recognized as a Best Place to Work and one of Deloitte's fastest-growing companies for the past 5 years, we're here to raise the standard for what cloud security and workplace culture should be.

If you have the passion to dig deeper, the desire to challenge convention, and the curiosity to build something better, Sysdig is the right place for you.

What you will do

Research novel cloud-based cyber attacks and malicious actor TTPs, reporting to Sr. Director, Threat Research
Develop novel research topics based on emerging threat trends, attacker behaviors, and gaps in current security detection
Author content on all aspects of cloud and container security and publish your findings
Develop relevant threat intelligence based on malware analysis to help secure our customers' environments
Partner with our application and product teams to architect security solutions for containers, Kubernetes, and cloud
Develop security rules and algorithms based on security research and best practices

What you will bring with you

8 years of cybersecurity experience with knowledge of any of the following: Threat Hunting, Penetration Testing, Cloud Security, Cloud / Linux Incident Response, or Linux Kernel Software Engineering
Supported the growth of teammates and successfully guided projects across their full lifecycle
You've deployed and worked with Kubernetes and worked with the major cloud service providers.
Hands-on experience using or developing open-source security analysis tools, such as Falco.
Experience with scripting for data analysis or automation, bonus points for eBPF experience.

What we look for

You identify opportunities for improvement and helps implement practical solutions
You bring team ownership focus across all phases of threat detection and research
You bring a collaborative mindset that values trust in the team
You bring experience with modern technology platforms (Cloud / Kubernetes)

When you join Sysdig, you can expect:

Extra days off to prioritize your well-being
401(k) Retirement Savings Plan with a 3% company match
Maternity and Parental Leave
Mental health support for you and your family through the Modern Health app
Full health benefits package for you and your family

The U.S. annual compensation range for this full-time position is between $163,000 and $204,000 USD/year. Actual offers may be higher or lower than this range based on a variety of factors, including your work location, job-related experience and education.

We would love for you to join us! Please reach out even if your experience doesn't perfectly match the job description. We can always explore other options after starting the conversation. Your background and passion will set you apart, especially if your career path is different.

Sysdig values a diverse workplace and encourages women, people of color, LGBTQIA+ individuals, people with disabilities, members of ethnic minorities, foreign-born residents, and veterans to apply. Sysdig is an equal-opportunity employer. Sysdig does not discriminate on the basis of race, color, religion, sex, national origin, age, disability, genetic information, sexual orientation, gender identity, or any other legally protected status.

#LI-SM3

#LI-remote

Top Skills

Cloud Security

Ebpf

Falco

Kubernetes

Linux

Penetration Testing

Threat Hunting

View all jobs at Sysdig

View Sysdig Profile

Report Job

Am I A Good Fit?

beta

Get Personalized Job Insights.

Our AI-powered fit analysis compares your resume with a job listing so you know if your skills & experience align.

The Company

HQ: San Francisco, CA

700 Employees

Year Founded: 2013

What We Do

Sysdig delivers cloud security the right way with open innovation, agentic AI, and the uncompromising truth of runtime. In a world of black boxes and blind spots, Sysdig helps security and development teams prevent, detect, and respond to threats in the moment.

AI is only as powerful as the signals it receives, and Sysdig Sage™ – the first agentic AI analyst for cloud security – is fueled by the deepest runtime intelligence in the industry. It doesn’t just observe. It reasons and acts with the context, speed, and precision that modern teams need to build and defend innovation in real time. Founded by the creators of Falco and Wireshark, Sysdig is trusted by more than 60% of the Fortune 500 and is built for those who refuse to compromise on security.

Why Work With Us

Sysdig's global expansion is fueled by our dedicated "Sysdiggers," known for collaboration, innovation, & transparency. With a diverse, international presence, we value every voice & are committed to our core values. We prioritize well-being with a top-tier benefits package. Join us to empower our team, thrive, & deliver our best work globally.