Information Security Engineer - Threat Research (Black Lotus Labs)

About Lumen

Lumen connects the world. We are igniting business growth by connecting people, data and applications – quickly, securely, and effortlessly. Together, we are building a culture and company from the people up – committed to teamwork, trust and transparency. People power progress.

We’re looking for top-tier talent and offer the flexibility you need to thrive and deliver lasting impact. Join us as we digitally connect the world and shape the future.

The Role

Black Lotus Labs is seeking a Data Science-oriented Threat Researcher on the Research & Analysis team. This team leverages Lumen’s global visibility of one of the world’s largest and most interconnected IP backbones and a petabyte-scale compute cluster to perform cutting edge threat research, hunting and tracking advanced persistent threat actors (APTs) and emerging criminal activity as the threat actors traverse the internet. They empower customers to stay ahead of the evolving threat landscape, through contributions to customer facing tools and services.

We are looking for an innovative data scientist who can apply large-scale data analysis and machine learning techniques to help our analysts and threat hunters detect and track threats in our telemetry, increasing their effectiveness and driving insights for customers. Your work will combine data science and security research to protect Lumen customers. This is a fully remote position.

The Main Responsibilities

• Scale analysis of evolving threats and tracking threat actors with data science tool sets such as machine learning and graph analytics.
• Research latest threat actor tools, techniques and procedures (TTPs) with a goal of automating detection.
• Develop machine learning prototypes to scale analysis of threats in Lumen telemetry and 3rd party data sets including OSINT that identify novel threat activity.
• Contribute to thought leadership initiatives by sharing insights and expertise at security conferences and internal briefings.
• Partner across Black Lotus Labs to deliver end to end solutions to our products and services. 
• Provide actionable feeds of emerging threats and vulnerabilities, translating complex technical information into actionable intelligence for executive leadership and external stakeholders.
  
  

What We Look For In a Candidate

• Demonstrable experience in applying machine learning, graph analytics and/or statistical approaches to telemetry in the security domain to detect and track malicious activity using supervised or unsupervised methods.
• Functional knowledge of hunting threat actors and developing algorithms and techniques to identify new threats from large data sets.
• Familiarity with machine learning techniques and methodologies as well as common toolsets such as TensorFlow.
• Strong programming skills in Python with understanding of cloud architectures and distributed computing such as Apache Spark.
• Track record of prototyping new innovative ideas and seeing them through to production.
• Knowledge of network-based threats and identifying behaviors without attack payloads.
• Strong writing skills to assist in sharing our knowledge with the public.
  
  

Compensation

This information reflects the anticipated base salary range for this position based on current national data. Minimums and maximums may vary based on location. Individual pay is based on skills, experience and other relevant factors.

Location Based Pay Ranges

$129,639 - $172,852 in these states: AL AR AZ FL GA IA ID IN KS KY LA ME MO MS MT ND NE NM OH OK PA SC SD TN UT VT WI WV WY

$136,121 - $181,494 in these states: CO HI MI MN NC NH NV OR RI

$142,603 - $190,137 in these states: AK CA CT DC DE IL MA MD NJ NY TX VA WA

Lumen offers a comprehensive package featuring a broad range of Health, Life, Voluntary Lifestyle benefits and other perks that enhance your physical, mental, emotional and financial wellbeing. We're able to answer any additional questions you may have about our bonus structure (short-term incentives, long-term incentives and/or sales compensation) as you move through the selection process. Learn more about Lumen's:BenefitsBonus Structure

Requisition #: 336813

Background Screening

If you are selected for a position, there will be a background screen, which may include checks for criminal records and/or motor vehicle reports and/or drug screening, depending on the position requirements. For more information on these checks, please refer to the Post Offer section of our FAQ page. Job-related concerns identified during the background screening may disqualify you from the new position or your current role. Background results will be evaluated on a case-by-case basis.

Pursuant to the San Francisco Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records.

Equal Employment Opportunities

We are committed to providing equal employment opportunities to all persons regardless of race, color, ancestry, citizenship, national origin, religion, veteran status, disability, genetic characteristic or information, age, gender, sexual orientation, gender identity, gender expression, marital status, family status, pregnancy, or other legally protected status (collectively, “protected statuses”). We do not tolerate unlawful discrimination in any employment decisions, including recruiting, hiring, compensation, promotion, benefits, discipline, termination, job assignments or training.

Disclaimer

The job responsibilities described above indicate the general nature and level of work performed by employees within this classification. It is not intended to include a comprehensive inventory of all duties and responsibilities for this job. Job duties and responsibilities are subject to change based on evolving business needs and conditions.

In any materials you submit, you may redact or remove age-identifying information such as age, date of birth, or dates of school attendance or graduation. You will not be penalized for redacting or removing this information.

Please be advised that Lumen does not require any form of payment from job applicants during the recruitment process. All legitimate job openings will be posted on our official website or communicated through official company email addresses. If you encounter any job offers that request payment in exchange for employment at Lumen, they are not for employment with us, but may relate to another company with a similar name.

Application Deadline

04/07/2025

Lumen connects the world. We are igniting business growth by connecting people, data and applications – quickly, securely, and effortlessly. Together, we are building a culture and company from the people up – committed to teamwork, trust and transparency. People power progress.