Threat Researcher - Linux

Role Summary Sophos is looking for a Linux Threat Researcher to join our team! The ideal candidate has extensive knowledge of Linux internals, is fluent in assembly, and has a knack for getting to the bottom of any issue. You enjoy thinking creatively; combining your deep technical knowledge, your tenacity for innovation, and your can‑do attitude to solve complex and challenging problems on a daily basis.

What You Will Do

As a member of the Linux Behavior Protection Team, you will be responsible for:

Implementing context‑aware & behavior‑based detection to provide multiple layers of protection from attacks targeting Linux infrastructure

Mapping protection & detection of attack behaviors to MITRE ATT&CK framework

Linux kernel exploit research and detection

Threat hunting, data mining, and using other methods of research to discover new threats to Linux and opportunities to improve protection

Working with product teams to ada...