Job Title:

Associate Security Researcher

About Trellix:

Trellix is a global cybersecurity leader helping organizations build cyber resilience for the AI era. Combining AI-native security, operational threat intelligence, and automated detection and response, Trellix provides defense-grade protection at machine speed across on-premises, air-gapped, operational technology, hybrid, and cloud environments. Trellix helps customers anticipate threats, scale effective security operations, maintain business continuity, and adapt their security posture for the modern threat landscape. Working with a broad partner ecosystem and global intelligence collaborators, Trellix helps strengthen the collective defense against cybercriminals and state-sponsored attacks. At Trellix, we empower professionals at all career stages to expand their technical expertise, lead strategic initiatives, and make a tangible global impact. Whether you are an industry pioneer or an emerging specialist, Trellix provides the tools and opportunities to enhance and expand your skill set. Join our mission to scale AI-driven cyber defense alongside an AI-accelerated threat landscape, and help build a safer, more resilient future. More at https://trellix.com.

Role Overview:

Join our innovative Security Research team at Trellix, where you'll contribute to the design and development of automated security research and threat detection pipelines, delivering powerful protection capabilities for Trellix endpoint security products. This isn't isolated research work—you'll be building and operating a production-grade automation system that bridges software engineering and threat research, enabling threat analysis, data telemetry, and the seamless generation of security protection policies at machine speed. We're looking for a motivated Associate Security Researcher (or fresh graduate) with a solid foundation in software development and a passion for building robust, scalable, and automated security solutions.

About the Role

• Design and Develop: Contribute to the design and development of our automated security research and detection pipelines, driving core automation functionality, threat ingestion workflows, and detection tooling from concept through production.
• End-to-End Ownership: Take ownership of pipeline features and components, from initial design and development through rigorous testing, false-positive validation, automation, and ongoing operational health.
• Detection Pipeline Development: Build, iterate on, and harden automated threat analysis and detection generation workflows, including automated sample triage, behavioral indicator extraction, and rule deployment across security engines.
• Deliver Quality: Ensure automated detection rules and pipeline services are delivered on time and to the highest quality standards, meeting research goals and protection commitments.
• Resilience and Performance: Implement best practices for pipeline resilience, scalability, and performance across high-volume threat telemetry and sample processing systems.
• Observability and Telemetry: Build and maintain operational instrumentation, logging, and dashboards to monitor pipeline throughput, detection efficacy, and system health.
  

About You

• Experience: 0–2+ years of experience (including internships, university research, or strong academic/personal projects; fresh graduates in Computer Science, Cybersecurity, Software Engineering, or related fields are strongly encouraged to apply) in Python or backend software development, with a strong interest in security research and automation.
• Operating Systems: Solid understanding of Linux and/or Windows operating system fundamentals and internals is a must.
• Security & Detection Knowledge:
  • Foundational understanding of cybersecurity concepts, malware behavior, common vulnerabilities (CVEs, OWASP), and threat analysis.
  • Familiarity with threat detection mechanisms and rule formats (such as YARA, Sigma, Snort, or behavioral signatures).
  • Exposure to static/dynamic malware analysis, sandboxes (e.g., Cuckoo/CAPE), or reverse engineering tools (Ghidra, IDA) through coursework or CTFs.
• Core Development Skills:
  • Excellent development and debugging skills in Python (or Go / C++).
  • Strong grasp of data structures, algorithms, and software design patterns.
  • CI/CD pipeline experience (Git, GitHub Actions, or equivalent).
  • Strong written communication for technical documentation and async collaboration.
  • Ability to learn quickly and operate effectively in a fast-moving environment.
• AI/ML & Automation Knowledge: 
  • Hands-on experimentation with Large Language Models (LLMs) and agentic workflows.
• Databases & Data Pipelines: 
  • SQL / Relational databases such as Postgres or MySQL.
• Services & Tools:
  • Cloud services familiarity (AWS or GCP).
  • Logging, telemetry, and monitoring tools.
• Domain Knowledge: 
  • Passion for threat intelligence, automated detection engineering, and scaling security research through software.
• Soft Skills:
  • Excellent communication and collaboration skills with the ability to work effectively across engineering, product, and security research teams.
  • Ability to communicate technical concepts clearly to both engineering and research stakeholders.
  • Strong analytical mindset, high coachability, and curiosity for solving complex security challenges through code.