Security Researcher in Cambridge

Darktrace is a global leader in AI-driven cybersecurity, helping organizations stay ahead of evolving threats every day. Darktrace was built on a genuinely differentiated idea: that Adaptive AI could detect and respond to novel, real-time cyber threats. Today, our customers depend on us to stay ahead.

At Darktrace, we are energized by that responsibility. We work across teams and rally around a shared goal. We own outcomes end to end - step in, step up and see things through without waiting to be asked. We make decisions with urgency, say the hard thing, and hold each other to high standards with care and directness. We move first and learn fast anticipating where our customers are going next, continuously challenging ourselves. We invest in the skills, learning and opportunities that help people deliver at the level their roles demand, and reward the aptitude and curiosity to grow beyond them.

Our Values: Own It | Win as One | Raise Our Bar | Move First. Learn Fast

Job Description:

As a Security Researcher, you’ll investigate emerging cyber threats and attacker behaviours to understand how real-world attacks operate and how they can be detected. You’ll apply your research to real security challenges, working with teams across the business to turn your findings into improvements to our technology and approach to threat detection.

Responsibilities include:

• Investigating emerging threat actor techniques, tactics and procedures (TTPs) across production and lab environments.
• Analysing security data to understand attacker behaviours and identify opportunities to improve detection and response.
• Working closely with development teams, sharing research findings and helping inform future research and product development.
• Supporting the development and testing of new approaches to detecting malicious or anomalous activity.
• Undertaking data analysis, scripting and other technical research to continuously improve our products and capabilities.
• Keeping up to date with developments across the cyber threat landscape and applying relevant findings to ongoing research.

What experience do I need?

We’re looking for someone with strong technical foundations, a curious and analytical mindset, and a genuine interest in understanding how attackers operate. You don’t need to have encountered every technology or threat type already, but you should be comfortable investigating unfamiliar problems and developing your knowledge.

Essential:

• A good understanding of networking fundamentals and core security concepts.
• An understanding of common attacker techniques, tactics and procedures (TTPs), with familiarity across areas such as Network, Cloud, Endpoint and Email security.
• An interest in emerging security challenges associated with AI systems and agentic AI.
• Strong analytical and problem-solving skills, with the ability to investigate complex or unfamiliar technical problems.
• Good organisational skills and the ability to communicate technical findings clearly.
• A collaborative approach, alongside the ability to work independently and make well-reasoned decisions.

Desirable:

• Experience or practical exposure, whether through employment, internships, academic research, personal projects or labs, in areas such as: Security Operations Centre (SOC) analysis, Incident response, Detection engineering, Threat hunting, Malware or threat research.
• Scripting or programming experience, for example Python, Bash or PowerShell.
• Experience working with security datasets, data analysis or statistical techniques.
• Familiarity with frameworks such as MITRE ATT&CK.
• Experience with, or knowledge of, our products and technologies.

Benefits:

• 23 days’ holiday plus all public holidays, rising to 25 days after 2 years of service.
• Additional day off for your birthday.
• Private medical insurance which covers you, your cohabiting partner and children.
• Life insurance of 4 times your base salary.
• Salary sacrifice pension scheme.
• Enhanced family leave.
• Confidential Employee Assistance Program.
• Cycle to work scheme.

As a growing business strengthening its governance and controls, this role plays a part in supporting high standards of integrity and accountability. Darktrace is an Equal Opportunity Employer. We consider all qualified applicants for employment without regard to race, colour, religion, sex (including pregnancy, childbirth, and related medical conditions), sexual orientation, gender identity or expression, national origin, age, disability, genetic information, marital status, veteran or military status, or any other characteristic protected by applicable federal, state, or local law.

Darktrace is committed to providing reasonable accommodations to qualified individuals with disabilities in accordance with applicable laws. If you require a reasonable accommodation to participate in the application or interview process, please contact your Talent Partner.