Cloud Threat Intelligence Researcher; Detection & Response

1-3 years

Poland

Full-Time

Security Intelligence Researcher (Cloud Detection & Response)

Department: Security Intelligence / Research & Development

Experience: 1-3 years

Employment Type: Full-time

About Sec Pod

Sec Pod is a cybersecurity company focused on helping organizations prevent cyberattacks through continuous visibility, intelligent risk analysis, and proactive security.

We are building the next generation of Cloud Detection & Response (CDR) capabilities to help organizations identify risks, understand attacker behavior, detect anomalies, and take action before threats become incidents.

The Opportunity

We are looking for a Security Intelligence Researcher to join our Cloud Detection & Response team.

This role is ideal for someone who is curious about how attackers think, enjoys investigating complex security problems, and wants to go beyond simply detecting threats.

You will research attacker techniques, cloud attack paths, security signals, vulnerabilities, and behavioral patterns to develop intelligence that can help organizations predict, prevent, detect, and respond to cyberattacks.

The role combines

• Cybersecurity research
• Attack analysis
• Security data analysis
• Automation and product engineering

What You Will Do

Security Research & Threat Intelligence

• Research emerging cyber threats, attack campaigns, vulnerabilities, and attacker techniques.
• Study how attackers compromise cloud environments and move across infrastructure.
• Analyze TTPs using frameworks such as MITRE ATT&CK.
• Research cloud attack paths across identities, workloads, containers, networks, storage, and APIs.
• Track security intelligence from public sources, threat reports, vulnerability disclosures, and security research communities.
• Identify patterns that can help organizations prevent attacks before exploitation occurs.
• Research and develop detection use cases for cloud environments.
• Analyze security telemetry and identify suspicious behavior and anomalies.
• Develop detection logic for cloud infrastructure, identities, workloads, containers, and applications.
• Investigate attack chains from initial access to privilege escalation, lateral movement, and impact.
• Design detection capabilities that go beyond individual alerts to understand the broader context of an attack.
• Research ways to reduce false positives and improve the quality of security detections.

Our goal is not merely to tell customers that an attack has happened.

We want to help them understand,

What could happen, why it could happen, and what should be done to prevent it.

You will help develop intelligence that can

• Identify weaknesses before attackers exploit them.
• Prioritize the risks that matter most.
• Connect vulnerabilities, misconfigurations, identities, assets, and threats.
• Recommend preventive actions.
• Improve an organization's overall cyber hygiene and resilience.

• Convert security research into product requirements and detection use cases.
• Work closely with software engineers and product teams to implement research findings.
• Create prototypes, proof-of-concepts, scripts, and automation.
• Develop and maintain security rules, indicators, detections, and intelligence models.
• Document research findings and communicate complex security concepts clearly.

• Strong understanding of cybersecurity fundamentals.
• Knowledge of common attack techniques and attacker methodologies.
• Understanding of cloud security concepts and cloud attack surfaces.
• Familiarity with MITRE ATT&CK or similar threat…