CYBER SECURITY PRINCIPAL

Cyber Security Professional

Do you enjoy information security research and threat intelligence? Do you have experience developing detections? Would you like the opportunity to research the latest threats and techniques used by attackers?

This position is on our Threat Intelligence and Detection Engineering (TIDE) team and we are looking for a cyber security professional with experience or education in tactical cyber-attack evaluation, threat hunting, exploit testing and analysis, cyber threat intelligence for Cloud environments.

The individual is driven and passionate about following new developments in the threat landscape.

Responsibilities:

• Research into new methodologies to detect and prevent both common and emerging threats in Cloud environments
• Curate tactical and strategic information from multiple intelligence and data sources
• Research threat actors and their associated tools, tactics, procedures, and goals
• Research emerging threats from malware samples, exploitation attempts, and other evidence of staged malicious infrastructure and activity
• Monitoring of current threats against the enterprise and providing analysis of effective proactive and reactive capabilities to reduce risk
• Tracking of common and emerging attacker Tactics, Techniques and Procedures (TTPs) and their respective detection and prevention opportunities
• Collaborate with Incident Response, Security Operations, Security Analytics, Network Security, and Endpoint Security teams
• Support Threat Detection and Response teams
• Support incident responders during active investigations and incidents

Minimum Qualifications:

• Understanding of cloud computing in infrastructure and operations for Paas, Iaas, SaaS, etc.
• Understanding of networking fundamentals relevant to information security
• Understanding of common network application protocols such as DNS, SSH, FTP, SFTP, etc
• Understanding of endpoint and network forensics concepts
• Understanding of common network security solutions such as firewalls, IDS/IPS, antivirus, EDR, etc
• Understanding of common attacker TTPs and detection methodologies
• Familiarity with security vulnerabilities, exploits, and detections
• Experience utilizing SIEM solutions for endpoint and network event analysis and correlation
• Experience with Breach and Attack Simulation tools
• Experience with adversary emulation concepts, purple teaming, and driving to improved detection solutions
• Excellent written and verbal communication skills

Preferred Qualifications:

• Bachelors degree in Business Administration, Computer Science, Social Science, Mathematics, or related field
• Eight (8) years experience in IT or a related field, including Minimum Five (5) years combined experience in cyber security operations, threat intelligence, or incident response
• Additional equivalent work experience may be substituted for the degree requirement.