Cybersecurity Engineer – Blue Team Benchmark

About the role

We are looking for a seasoned Cybersecurity Engineer to design and build benchmark tasks that reflect real‑world SOC and detection engineering work. You will create realistic multi‑host network environments, including Active Directory and cloud control planes, to evaluate blue‑team AI reasoning at scale.

Key responsibilities

• Design and develop benchmark tasks grounded in actual SOC and detection engineering scenarios.
• Construct realistic evaluation environments with multi‑host networks, Active Directory, and cloud control planes beyond simple container setups.
• Define success criteria for blue‑team AI reasoning and build reproducible measurement infrastructure.

Required profile

• Hands‑on blue‑team experience in at least one area: detection engineering, threat hunting, incident response, or malware analysis.
• Ability to translate analyst judgment into effective evaluation criteria.
• Strong opinionated approach to what matters in security evaluations.

Required skills

• Detection engineering
• Threat hunting
• Incident response
• Malware analysis
• Scripting (Python, PowerShell)
• Cloud platforms (AWS, Azure)
• Enterprise environments (Active Directory)