Cyber Threat Researcher
Fortinet · Burnaby
About the Role
We are looking for a detail-oriented and analytically driven Cyber Threat Researcher to join our network threat research team. In this role, you will dive deep into network traffic, hunt for hidden threats, collect and validate actionable threat intelligence, and produce high-impact technical content. You will track emerging adversary techniques, map them to industry frameworks, and continuously improve our detection capabilities and simulation scenarios.
Key Responsibilities
Collect, correlate, and analyze threat intelligence sources to extract actionable insights that enhance detection, response, and prevention strategies.
Perform in-depth network packet analysis using Wireshark to identify malicious activity, protocol anomalies, and attack indicators.
Analyze network traffic flows and behaviors using Zeek, Suricata, and Deep Packet Inspection (DPI) engines.
Author and edit technical articles, ensuring clear, accurate, and actionable guidance for the global security community.
Monitor emerging threats, adversary tactics, and infrastructure trends; map findings to the MITRE ATT&CK framework.
Design and propose new attack simulation scenarios, detection rules, and research features to proactively counter evolving adversary behaviors.
Conduct proactive threat hunting within customer NDR (Network Detection and Response) datasets to validate detection efficacy and uncover stealthy threats.
Required Qualifications
1–3 years of hands-on experience in cybersecurity, with a focus on network security, threat intelligence, or security research.
Strong working knowledge of Linux environments and proficiency with command-line networking and analysis tools.
Demonstrated experience with packet capture analysis and frame-level debugging using Wireshark.
Practical experience deploying and managing virtualized lab environments (e.g., VMware, ESXi, Ubuntu).
Hands-on experience or strong familiarity with Zeek, Suricata, and/or DPI technologies for network traffic analysis.
Solid understanding of the MITRE ATT&CK framework and experience mapping threats or adversary behaviors to it.