logo inner

Senior Detection Engineer

PonduranceWorldwideRemote
This job is no longer open

Senior Detection Engineer
REMOTE, USAbout the Role: When it comes to data, do you Excel? Are you fluent in data queries, no matter the language? Can you play nice with both humans and machines? Then you’re in luck!  We’re looking for a talented Sr. Detection Engineer who wakes up ready to seize the data (see what we did there?!).As a Sr. Detection Engineer, you will play a crucial role in developing and enhancing our threat detection capabilities. You will be responsible for identifying emerging threats, analyzing attack techniques, and devising effective detection methods to secure our clients' digital environments.

Also acting as a point of contact for other teams or stakeholders requiring support on detection-related issues and customer issue escalations, as well as an escalation point for other Detection Engineers.Your expertise will contribute to the ongoing improvement of our cybersecurity products and services, ensuring our customers' peace of mind in an ever-evolving threat landscape.Responsibilities:

  • Oversee/advise in the deployment and tuning of security tools and technologies.
  • Regularly assess the readiness and capabilities of team projects and tasks, providing appropriate support, guidance, or training as needed.
  • Build new alerting techniques from an ever growing list of data sources, as well as improve existing alerts.
  • Conduct in-depth research and analysis of emerging cyber threats, attack vectors, and vulnerabilities to proactively identify potential risks.
  • Stay current with the latest threat landscape and integrate threat intelligence data into detection mechanisms.
  • Coach and mentor junior detection engineers, provide oversight to junior team members to ensure timely and successful task completion, fostering an environment of continuous learning and improvement.
  • Work closely with SOC management and analysts to improve alerting workflow.
  • Improve efficacy of telemetry collection and threat detection rules. 
  • Foster cross functional relationships (kumbaya) with other department engineers to align goals and transfer knowledge.
  • Contribute to the creation of documents, reports, technical advisories, and whitepapers for internal and external stakeholders.
  • Participate in sprint demo/planning and other team or project meetings.

Technologies:

  • Advanced Data Query Experience: Must be able to write and transform queries from one language to another (example - take a query that was written for Splunk and convert it to another SIEM’s syntax to find the same results)
  • Intermediate Linux Experience: Must know how to operate on a Linux CLI
  • Intermediate Windows Experience: Logging / Log Analysis / Log Alerting 
  • Intermediate SIEM / SOAR Knowledge: Be able to effectively use SIEM / SOAR platforms to build queries, alerts, actions, etc. (This is user level knowledge, not admin / configuration level knowledge)
  • Cloud application logs/monitoring: Familiarity with the big 3 (AWS, Azure, GCP) and O365 is a plus
  • Ticketing/development/collaboration tools: Be able to work within internal ticket queues and development management platforms (Atlassian JIRA/Confluence experience a plus)
  • Experience with programming in Python is a plus

Knowledge and Skills: 

  • 5+ years experience in threat detection 
  • Proficient in threat intelligence and threat hunting methodologies
  • The candidate should have a strong understanding of threat landscapes, threat intelligence, and threat hunting methodologies. Experience with tools used for threat hunting and knowledge of various attack vectors is necessary. Certifications like Certified Threat Intelligence Analyst (CTIA) can be beneficial
  • Strong understanding of cyber threats, attack methodologies, and vulnerability assessment.
  • Strong understanding of network protocols, operating systems and security technologies.
  • Relevant certifications such as CISSP, CEH, OSCP, Security+, GIAC or equivalent are a plus.
  • Excellent communication skills, both verbal and written.
  • Ability to work efficiently both independently and as part of a team.
  • Analytical Thinking: Break down the fundamental components of a problem or situation, examine the relationship between them, verify all pertinent facts and draw an appropriate conclusion.
  • Applied Technical Thinking: Able to apply specialized, theoretical knowledge to efficient operational uses.
  • Multitasking: Able to multitask effectively and shift focus easily and rapidly from one task to another.

If you have other combinations of relevant skills and experience that you expect make you the right candidate for this role, please let us know!Who we are:At Pondurance we embrace, educate, and protect people by helping make our world a better and safer place.  We believe in inviting good people into our company who are driven to become great! Every person at Pondurance is encouraged to focus and grow in their individual areas of interest, passion, and career path. We have accessible leaders as Mentors who believe “None of us are as smart as all of us” (R.

Pelletier). We believe everyone has the freedom to be themselves, especially at work and so we embrace, support, and celebrate each other. Each one of us influences our company’s direction through speaking up, you have a voiceand we want you to use it.Do you want to be a part of something different? Do you want to influence real change? Do you want to be part of the solution? Then join us in redefining the security and cyber risk landscape.What We Offer:The opportunity to apply your expertise, take on new challenges, and help customers address their biggest security objectives.An inclusive culture of teamwork that embraces the diversity of our people and communities in which we work.Some of the corporate benefits (there are more) for full-time employees include:

  • Medical, dental, vision, disability, FSA, HSA, life and AD&D insurance, 401(k) Plan. 
  • Time off: PTO, sick, holiday, & parental leave details are available
  • Money: We provide competitive compensation packages based on the market and your overall credentials.

Although this is a remote role, if you live close by, you’ll have access to our office locations: McLean, VA or Indianapolis, IN.To promote a healthy and safe work community we require background and drug screenings as part of our hiring process. Details of our process will be provided upon request.  We are an equal opportunity employer focused on celebrating diversity and inclusion. We believe that each individual should be treated equally without regard to race, color, identity, national origin, protected veteran status, religion, sex including sexual orientation and gender identity, disability, or any other characteristic protected by law. 

This job is no longer open

Life at Pondurance

Pondurance empowers companies to manage reputational, financial, and regulatory risk through the development and execution of compliance and cyber security solutions. By providing expert consulting and cost-effective managed services, we have helped over 200 companies in North America and Europe reduce their risk exposure and improve their security postures. We offer our clients: Threat Hunting and Response // NETWORK, LOG, HOST Pondurance provides clients with technology and skilled responders to defend their systems and to help protect their information assets. Consulting // Information Security: The Pondurance team analyzes critical applications, infrastructure, people and processes to pinpoint vulnerabilities. Business Continuity: Pondurance reviews threats, risks and business impacts in order to foster disaster avoidance solutions. Compliance: Pondurance maintains, establishes and creates information security programs that align with compliance regulations.
Thrive Here & What We Value1. Emphasis on teamwork and collaboration2. Inclusive culture that embraces diversity and celebrates individuality3. Promote a healthy and safe work community through background and drug screenings in hiring process4. Equal opportunity employer focused on celebrating diversity and inclusion5. Provide competitive compensation packages based on market and credentials
Your tracker settings

We use cookies and similar methods to recognize visitors and remember their preferences. We also use them to measure ad campaign effectiveness, target ads and analyze site traffic. To learn more about these methods, including how to disable them, view our Cookie Policy or Privacy Policy.

By tapping `Accept`, you consent to the use of these methods by us and third parties. You can always change your tracker preferences by visiting our Cookie Policy.

logo innerThatStartupJob
Discover the best startup and their job positions, all in one place.
Copyright © 2024