About the role
Hunt directly in customer environments with proactive and reactive guidance. Explore and correlate large data sets to uncover novel attack techniques, monitor and catalog changes in activity group tradecraft, and investigate alerts for enterprise customers. Work directly with customers at all levels of their security organization from analyst to CISO to support investigation and response. Collaborate with data science and threat research teams to develop and maintain accurate and durable detections. Leverage AI-powered security tools, copilot, and agentic workflows to accelerate threat investigations, enrich customer findings, improve analytical efficiency, and drive better security outcomes. Design, build, test, and operationalize automations and AI agents that assist with threat hunting, case enrichment, security research, detection validation, and customer-ready investigative outputs. Partner with engineering, research, and operations teams to identify opportunities where AI agents and automation can improve the scale, consistency, and effectiveness of Defender Experts service delivery. Participate in a global security operations model, including potential weekend, holiday, or non-standard business-hour coverage where legally allowed and aligned to local
requirements. Experience in software development lifecycle, large-scale computing, modeling, cybersecurity, and/or anomaly detection; OR Master's Degree in Statistics, Mathematics, Computer Science, or related field. Experience in a technical role in Security Operations, Threat Intelligence, Cyber Incident Response, or Penetration Testing/Red Team. Working with extremely large data sets using tools and scripting languages such as Excel, KQL, Python, Splunk, and Power BI. Ability to work from the Prague office at least three (3) days per week. Ability to support weekend, holiday, and non-standard business-hour coverage where legally allowed and aligned to local labor regulations. Experience leveraging generative AI, large language models, copilots, autonomous agents, or AI-assisted workflows to improve security operations, threat hunting, incident response, investigations, or operational efficiency. Experience building automations or AI-assisted workflows using scripting languages, orchestration platforms, low-code automation tools, or agent frameworks. Advanced knowledge of operating system internals and security mechanisms. Knowledge of kill-chain model, ATT&CK framework, and modern penetration testing techniques. Knowledge of operating system internals, OS security mitigations, and security challenges across Windows, Linux, Mac, Android, and iOS platforms. Excellent cross-group and interpersonal skills, with the ability to articulate business need for detection improvements. Knowledge of major cloud and productivity platforms as well as identity systems and related security concerns. Experience with direct customer communication in a service delivery role. Ability to use data to tell a story. Experience with reverse engineering, DFIR, incident response, or machine learning models. Experience with system administration in a large enterprise environment, including Windows and Linux servers and workstations, network administration, and cloud administration. Experience with offensive security including Metasploit, exploit development, OSINT, and designing ways to breach enterprise networks. Additional advanced technical degrees or cyber security certifications such as CISSP, OSCP, CEH, or GIAC. Security Research IC3 - The typical base pay range for this role across Czechia is Kč 966,000.00 - Kč 1,727,000.00 per year. Certain roles may be eligible for
