Security Researcher Manager - Cloud & Kubernetes (Cortex)

• Manage a team of security researchers conducting research on attacks against cloud data, Kubernetes and containers
• Lead, mentor, and grow a team of talented security researchers focused on defending organizations as they transition from on-premises data centers to modern cloud and Kubernetes infrastructure
• Drive the strategy and execution of research initiatives to uncover novel techniques for detecting and responding to sophisticated attacks targeting hybrid and cloud-native environments
• Define and prioritize detection use cases, relevant datasets, and innovative analytic approaches combining runtime visibility and posture management across diverse platforms
• Stay up to date with the latest attacker methodologies, APT campaigns, and TTPs to ensure our detection capabilities stay ahead of evolving threats in both legacy and cloud contexts
• Oversee simulation of real-world attacks and deep behavioral analysis to inform and validate detection content
• Foster collaboration across engineering, product management, and go-to-market teams to deliver impactful security solutions
• Represent the team and share insights with the security community through blogs, conference talks, and publications

• 2+ years in a leadership or management role, including mentoring researchers and setting research strategy
• 5+ years in security research with a proven track record of driving impactful projects
• Deep expertise in cloud-native security, with strong focus on Kubernetes, containers, and major cloud providers (AWS, Azure, GCP, OCI)
• Experience developing or working with detection and response products, such as XDR, EDR, or cloud workload protection platforms
• Excellent communication skills, with the ability to articulate complex research findings and drive alignment across diverse teams
• Proficient in hands-on coding and scripting (e.g., Python)
• Experience working with large-scale data pipelines and analytics (e.g., GCP BigQuery, Dataflow)

Familiarity with Kubernetes threat modeling frameworks (e.g., MITRE ATT&CK for Containers)