Cyber Security Research Eng. 3 (Phishing & Threat Analytics)

Cyber Security Research Engineer The Cyber Security Research Engineer is responsible for the research, analysis, detection, disruption, and mitigation of phishing threats and advanced cyber attacks targeting employees, customers, and enterprise systems. This role serves as a key contributor within Threat Analytics, Cyber Threat Intelligence, Incident Response, and Security Operations functions. The ideal candidate will possess strong expertise in phishing detection, threat hunting, security analytics, incident response, digital forensics, and adversarial analysis. This individual will leverage enterprise security tools, develop detection logic, investigate cyber threats, and provide actionable recommendations that improve the organization's security posture. This role requires a highly analytical and investigative mindset with the ability to think like an adversary, identify emerging attack techniques, and develop scalable solutions to detect and mitigate future threats. Key Responsibilities Phishing Detection & Threat Analytics Incident Response & Digital Forensics Threat Hunting & Offensive Security Research Security Monitoring & Detection Engineering Security Risk Assessment & Security Engineering AI Security & Emerging Threat Research Cloud Security & Security Operations Collaboration & Leadership Required Qualifications 4+ years of Cyber Security Research experience or equivalent demonstrated through work experience, military experience, education, or training. Advanced Information Security technical skills. Experience detecting, investigating, and disrupting phishing attacks targeting employees, customers, or enterprise brands. Experience creating and maintaining: Regular Expressions, YARA Rules, Detection Logic, Threat Analytics Content Experience reviewing and correlating security logs from multiple security platforms. Experience supporting security investigations and incident response activities. Hands-on experience with: SIEM Platforms, IDS/IPS Technologies, Endpoint Security Solutions, Email Security Gateways, Web Security Gateways, Security Detection Technologies Experience with host and network log analysis supporting incident response and threat hunting. Strong analytical, investigative, and problem-solving skills. Ability to manage complex security issues and develop long-term solutions. Preferred Qualifications Threat Analytics, Detection Engineering & Emerging Threat Research Experience leveraging security analytics, large-scale data analysis, and threat intelligence techniques to identify and disrupt cyber threats. Experience developing cybersecurity reporting, threat intelligence metrics, and operational security dashboards. Experience supporting: Threat Hunting, Cyber Threat Intelligence, Incident Response, Digital Forensics, Security Monitoring, Detection Engineering Experience developing automated detection capabilities, security analytics, YARA rules, and security automation workflows. Experience integrating and optimizing enterprise security tools to improve phishing and threat detection effectiveness. Experience supporting security operations within large enterprise environments. Familiarity with AI security research, AI-driven threat detection, security analytics, and AI-related threat investigations. Offensive Security & Investigation Experience Knowledge of: Offensive Security Methodologies, Penetration Testing, Vulnerability Research, Adversary Emulation, Exploitation Techniques, Red Team Methodologies Experience utilizing adversarial thinking during investigations, threat hunting, and incident response activities. Experience supporting phishing analysis, email investigations, malicious domain analysis, and cybercrime investigations. Cloud & Security Engineering Experience supporting cloud security monitoring and incident response activities. Experience with security engineering, security tool integration, and security automation initiatives. Knowledge of DevSecOps principles and modern security operations practices. Experience supporting enterprise security programs within highly regulated environments. Technical Skills Phishing & Email Security Phishing Detection Phishing Disruption Email Threat Analysis

DMARC

Email Security Gateways Brand Protection Malicious Domain Analysis Regular Expressions YARA Rules Threat Analytics & Detection Engineering Security Analytics Threat Hunting Detection Engineering Threat Intelligence IOC Analysis Security Monitoring Alert Tuning Cybersecurity Reporting Incident Response & Forensics Incident Response Digital Forensics Malware Investigations Host Log Analysis Network Log Analysis Root Cause Analysis Threat Investigations Offensive Security Penetration Testing Ethical Hacking Adversary Emulation Vulnerability Research Security Assessments Exploitation Analysis Threat Simulation Security Platforms SIEM

IDS/IPS

Endpoint Security Email Security Gateways Web Security Gateways Security Detection Platforms Log Management Technologies Security Domains Application Security Vulnerability Management Threat Modeling Security Engineering Cloud Security Authentication & Identity Services Access Management Security Risk Assessment AI & Emerging Technologies AI Security Generative AI Security LLM Threat Analysis AI Threat Intelligence Security Analytics Automation AI Security Assessment Preferred Certifications

GIAC (GCIH, GCIA, GCFA, GCFE, GPEN, GREM)

CISSP

GCTI OSCP Security+ Other Cyber Defense, Incident Response, Threat Intelligence, or Offensive Security Certifications Desired Candidate Profile The ideal candidate is a highly technical cybersecurity professional with expertise in phishing detection, threat analytics, incident response, digital forensics, and adversarial analysis. They possess strong investigative skills, experience developing detection content and analytics, and a deep understanding of modern cyber threats targeting enterprise organizations. Successful candidates will demonstrate the ability to analyze complex security events, disrupt phishing campaigns, conduct threat hunting activities, leverage security analytics platforms, and develop long-term detection and mitigation strategies. Experience supporting large-scale enterprise security operations, emerging AI-related threats, and security automation initiatives is highly desirable. Apex Systems