Threat Researcher - Linux (Winnipeg)

Sophos

winnipeg, mb, Canada
Full-time
Posted June 05, 2026

Job Description

Role Summary

Sophos is looking for a Linux Threat Researcher to join our team! The ideal candidate has extensive knowledge of Linux internals, is fluent in assembly, and has a knack for getting to the bottom of any issue. You enjoy thinking creatively; combining your deep technical knowledge, your tenacity for innovation, and your can‑do attitude to solve complex and challenging problems on a daily basis.

What You Will Do

  • Implementing context‑aware & behaviour‑based detection to provide multiple layers of protection from attacks targeting Linux infrastructure
  • Mapping protection & detection of attack behaviors to MITRE ATT&CK framework
  • Linux kernel exploit research and detection
  • Threat hunting, data mining, and using other methods of research to discover current threats to Linux and opportunities to improve protection
  • Working with product teams to adapt protection technology to the rapidly evolving threat landscape ...