• Help design, build, and operate large-scale deception infrastructure within our hyper-realistic Attacker Eye global honeypot network, emulating real-world systems, services, and applications exposed to the internet. • Engineer and maintain high-interaction deception assets that capture authentic attacker behavior, exploitation workflows, and post-exploitation activity across multiple protocols and technology stacks. • Continuously evolve deception tactics by tracking attacker tradecraft, emerging vulnerabilities, and exploitation techniques to ensure environments remain believable and resistant to fingerprinting. • Instrument, enrich, and analyze deception telemetry , transforming raw log data into high-quality signals. • Generate automated reports from raw log data , producing structured insights on attacker behavior, exploitation trends, and campaign activity for internal and external consumption. • Rapidly deploy new deception scenarios in response to emerging N-day and 0-day vulnerabilities, active exploitation campaigns, and shifts in adversary behavior. • Collaborate closely with Detection Engineering and Threat Intelligence teams to convert deception telemetry into production detections and actionable intelligence. • Share insights across the organization , working with Labs, Marketing, Product, and other teams to help communicate emerging threats, research findings, and attacker trends. • Contribute original research and publications , documenting attacker behavior, deception methodology, and exploitation patterns for both internal stakeholders and the wider security community. • Own and improve the deception lifecycle , from implementation, deployment through, data quality, and long-term signal value.