12-month full-time research role advancing cybersecurity methods for data provenance and system telemetry. Develop and evaluate EDR and causal analysis techniques for audit logs, publish in top security venues, and collaborate with academic and industry partners.