About GreyNoise

GreyNoise Intelligence is a mission driven security startup focused on helping organizations understand and mitigate risks from Internet scanning and exploitation. GreyNoise provides real-time, verifiable intelligence on all actors scanning the Internet and how some of them are attempting to exploit vulnerabilities on assets connected to corporate networks. The intelligence is highly trusted because it’s generated from a global fleet of thousands of purpose built sensors observing the Internet. Advanced data science techniques and AI are used to process millions of observed events into real-time intelligence for customers.

The GreyNoise Global Observation Grid observes and analyzes unique threat data at-scale that no one else can. GreyNoise provides the most actionable threat intelligence against perimeter threats, so that no attack works twice.

 

All US based positions are fully remote within the US, with optional office attendance at our DC area headquarters, unless otherwise specified. Applicants must have US work authorization. 

Please see the specific job description for all international position locations.

 

The Role

GreyNoise is the first line of defense for our customers when it comes to emergent threats involving mass exploitation. Our actor, action, and source IP intelligence enables security teams to confidently block active malicious campaigns, triage alerts to reduce Security Operations Center (SOC) overload, and buy time to patch or mitigate critical weaknesses. The Security Research and Detection Engineering team members are responsible for ensuring we have Day-0 coverage for new vulnerabilities. They are also charged with neutralizing the chatter around "celebrity" vulnerabilities that are, essentially, nothing-burgers.

What You Will Do

• Lead the function and team for Security Research for GreyNoise
• Build and manage a team of exceptional security researchers
• Be the leader for innovation in cybersecurity research and at-scale detection engineering at GreyNoise.  GreyNoise packet captures the Internet every second of every day, and you will lead an expert team of researchers turning billions of packets into accurate, unique, and actionable threat intelligence.
• You’ll forge expert novel research into powerful practitioner information at conferences, in publications, and throughout the GreyNoise platform.
• Collaborate with Product, Engineering, Sales, Marketing and Customer Success to align the team's mission and priorities with business plans and goals.
• Represent GreyNoise as one of the key faces and voices of our research, communicating our insights, observations, and innovations through community engagement, social media, blog posts, research papers, conferences, media interactions, and direct communication to customers.
• Forge and manage partnerships with key government and industry researchers to ensure GreyNoise remains at the forefront of new developments.

Finally and most importantly you will mentor, coach, and grow with one of the most respected and knowledgeable teams of internet researchers and cybersecurity practitioners in the industry.

 

What You Will Bring

A culture-first, team-first attitude to everything you do.  The successful candidate will have demonstrated leadership and expertise in core cybersecurity areas, including:

• SOC tools, processes, and needs
• Red, Blue, and Purple Team operations
• Novel threat and vulnerability research
• Detection Engineering
• Automation-, AI-, and event-driven processes that work at speed and scale
• Tracking emergent threats, novel TTPs, and threat actors
• Strong communication skills in both small team and big room environments
• A solid track record of building, managing and growing fully remote teams
• Worked with government organizations on cyber projects

Nice To Haves 

• A history of creating or contributing to cyber-focused open-source projects
• Experience interfacing with tech and mainstream media outlets (a.k.a. "media training")
• Experience in conceptualization and production of customer- and community-focused reports.
• Strong reading comprehension as it relates to RFC’s and other written technical artifacts
• Familiarity with standard industry network analysis tooling
• Experience with large-scale distributed internet data collection, experience with attacker techniques

 

A Few of our Engineering Principles

• Deliver fast, deliver often.
• Tech is cheap, don't be afraid to throw it aw