Senior Detection Research Engineer

Cloud Protection protects Fortune 500 enterprises and government organizations worldwide from malware, phishing, and identity-based attacks in Salesforce. Our work builds on more than 30 years of experience in analyzing malware and defending against advanced threats — expertise few security companies can match. It’s our people who make that possible. Newly independent after years as WithSecure’s most autonomous business unit, we combine the focus and speed of a startup with decades of cybersecurity depth. We’re a diverse team that values passion, purpose, and genuine wellbeing at work, and we’re looking for people who want to set the standard for Salesforce security with us. We’re looking for a Senior Detection Research Engineer to join our Threat Intelligence team. You’ll research threats targeting Salesforce environments, then turn what you learn into detection logic that protects customers. You’ll also help shape how we write, test, and evaluate detections as our protection capabilities evolve. This is a senior individual contributor role with substantial hands-on work and close collaboration with product and engineering teams. Key Responsibilities • Research malware, phishing, and adversary techniques including emerging threats involving AI that target Salesforce and SaaS environments, and translate findings into detection requirements. • Analyze telemetry, investigate false positives and missed detections, and use the findings to improve existing detections. • Design detection logic and workflows that combine metadata, threat signals and analysis results to make reliable protection decisions. • Explore new technologies and detection approaches, test promising ideas quickly, and turn what works into practical improvements to protection. • Work with detection technology and threat intelligence partners to assess accuracy, latency and contribution to protection. • Identify missing protection capabilities and work with product and engineering teams to define and prioritize improvements. What are we looking for? • 7+ years of experience in detection engineering, threat research, malware analysis or a related security role. • Strong understanding of malware, phishing, URL-based threats and adversary techniques. • Hands-on experience designing, testing and tuning detections, including investigating false positives and missed detections. • Experience assessing detection technologies or intelligence sources using representative data and clear performance measures. • Experience working with engineering and product teams to turn security research into protection improvements. • Ability to explain technical findings and recommendations clearly to both technical and non-technical audiences. • Familiarity with Salesforce, SaaS or cloud security is a strong plus. The salary displayed on this page represents the estimate for the role. Final compensation is discussed individually and depends on experience, skills, and the local market and might vary up or down. What will you get from us • Meaningful work with real-world impact – your work helps protect businesses and critical infrastructure from modern cyber threats. • Flexible ways of working, including up to 30 days per year working abroad and paid sick leave from day one. • A strong focus on well-being, with mental health support and comprehensive benefits. • Continuous learning, modern tools, and a people-first culture that values trust and collaboration. Purpose – Why we exist We exist to give organizations the confidence to run their business on Salesforce without fear of hidden threats — protecting them from the uncertainty and disruption that cyber-attacks and crime cause. Vision – Where we are heading We're working toward a future where no Salesforce customer suffers serious loss because of a cyber-attack — at least not the ones who put their trust in us. Our aim is to be the #1 content security partner for Salesforce customers worldwide. Mission – What we do We verify every file and URL passing through a customer's Salesforce environment in real time and remove anything harmful immediately. Our Salesforce-native architecture keeps things simple and minimally invasive, while our data handling follows the strictest standards of encryption and compliance — with no shortcuts, for even the most demanding enterprises and governments. Diversity & Inclusion As Cloud Protection for Salesforce, we're an equal opportunity employer, and we believe a diverse workforce is central to our success. We consider all qualified applicants without regard to nationality, race, ethnicity, sex, gender, sexual orientation, religion, age, marital status, or disability. We want our recruitment process to work for you — if you need any adjustments along the way, just let our recruitment team know.