Applied Cyber Security Researcher

Applied Cyber Security Researcher position with Aon. This role involves researching emerging threats, analyzing security data sets, and operationalizing intelligence into practical security outcomes. You will collaborate with incident response and security operations teams to support investigations, enhance detection coverage, and integrate new security capabilities into Aon’s environment.

This position has a virtual USA workstyle. Eastern Time or Central Time Zone is preferred.

As an Applied Cyber Security Researcher, you will spend your time researching emerging threats, analyzing various security data sets, and operationalizing intelligence into practical security outcomes. Your day work will involve malware and adversary behavior analysis, proactive threat hunting, development of detections and signals, and engineering tactical solutions to address evolving risks.

You will collaborate with incident response and security operations teams to support investigations, enhance detection coverage, and integrate new security capabilities into Aon’s environment.

• Research and Analysis:
  Conduct in‑depth research on emerging cyber threats, attack vectors, and security vulnerabilities.
• Analyze unique and large‑scale security data sets to enhance security operations across Aon.
• Analyze malware, exploit kits, and other malicious tools to understand behavior, techniques, and potential countermeasures.
• Threat Intelligence:
  Gather, correlate, and analyze intelligence from multiple internal and external sources to identify potential threats.
• Produce detailed tactical intelligence reports and threat assessments to support operational and leadership decision‑making.
• Develop, maintain, and improve threat intelligence feeds, tooling, and workflows.
• Operationalize threat intelligence to improve detection, response, and overall security posture.
• Participate in proactive threat hunting activities to identify threats and indicators of compromise within Aon’s environment.
• Apply multiple data sources to develop threat hunting hypotheses, signals, and techniques to uncover malicious activity.
• Create and maintain threat hunting playbooks based on emerging adversary behaviors and techniques.
• Incident Response Investigation Support:
  Assist in incident response activities by offering specialized knowledge and investigative support during security incidents.
• Collaborate with the Proactive Threat Operations team, Aon AC3, and other cybersecurity teams to support investigation and response efforts.
• Security Operations Enablement:
  Perform data analysis to identify trends, patterns, and indicators of compromise.
• Create, tune, and curate detections and signals to enhance threat detection capabilities.
• Support day‑to‑day security operations by developing and implementing security tools, workflows, and technologies.
• Engineer tactical solutions to address immediate security needs and active incidents.
• Collaborate with security operations teams to integrate new security technologies and tooling into existing infrastructure.
• Provide technical support and expertise to sustain and improve ongoing security operations.

• 5+ years of experience in cybersecurity, with a strong focus on threat intelligence, threat research, or security operations
• 3+ years of hands‑on experience conducting cyber threat research, including analysis of emerging threats, attack vectors, and vulnerabilities
• 3+ years of experience analyzing large‑scale security datasets to identify malicious activity, trends, and indicators of compromise
• Proven experience performing malware analysis, including investigation of malicious tools, exploit kits, and attacker techniques
• 3 or more years of demonstrated experience across the threat intelligence lifecycle, including collection, correlation, analysis, and dissemination of intelligence from multiple sources
• Demonstrated ability to produce high‑quality tactical intelligence reports and threat assessments for both technical and executive audiences
• 2+ years of experience operationalizing threat intelligence to enhance detection, incident response,…