PEAK6

Apex Fintech Solutions (AFS) powers innovation and the future of digital wealth management by processing millions of transactions daily, to simplify, automate, and facilitate access to financial markets for all. Our robust suite of fintech solutions enables us to support clients such as Stash, Betterment, SoFi, and WeBull, and more than 20 million of our clients' customers. 
Collectively, AFS creates an environment in which companies with the biggest ideas in fintech are empowered to change the world. We are based in Dallas, TX and also have offices in Austin, New York, Chicago, Los Angeles, Portland, and Belfast. 
If you are seeking a fast-paced and entrepreneurial environment where you'll have the opportunity to make an immediate impact, and you have the guts to change everything, this is the place for you. 
AFS has received a number of prestigious industry awards, including:
<ul>
<li>2021, 2020, 2019, and 2018 Best Wealth Management Company - presented by Fintech Breakthrough Awards</li>
<li>2021 Most Innovative Companies - presented by Fast Company</li>
<li>2021 Best API &amp; Best Trading Technology - presented by Global Fintech Awards</li>
</ul>


JOB: Security Operation Center (SOC) Analyst
The Role
Seeking a Security Operation Center (SOC) Analyst to join our Cybersecurity team.
The SOC Analyst will be responsible for day-to-day security threat monitoring, analysis, and response. You will manage security incidents and review security alerts, determine if the security events are false positives, true positive, or false negatives and work with incident responders on known or suspected security threats. The Analyst will work on threat intelligence gathering and integration, forensics, and incident response that adhere to best practices and recognized control frameworks. 
Primary Responsibilities
<ul>
<li>Responsible for working in Security Operation Center (SOC) team environment.</li>
<li>Investigate incidents using SIEM and UEBA technologies, packet captures, reports, data visualization, and pattern analysis.</li>
<li>Analyze, escalate, and assist in remediation of critical information security incidents.</li>
<li>Improve and challenge existing processes and procedures in a very agile and fast-moving information security environment.</li>
<li>Able to participate in an on-call rotation.</li>
<li>Perform real-time alert monitoring and risk mitigation.</li>
<li>Provide analysis and trending of security log data from many heterogeneous security devices across different layers.</li>
<li>Provide Incident Response (IR) support when analysis confirms the actionable incident.</li>
<li>Provide threat and vulnerability analysis as well as security advisory services.</li>
<li>Analyze and respond to previously undisclosed software and hardware vulnerabilities.</li>
<li>Investigate, document, and report on information security issues and emerging trends.</li>
<li>Integrate and share information with other analysts and teams.</li>
<li>Participate in security projects and assist network operations and engineering teams.</li>
</ul>

Qualifications
<ul>
<li>Bachelor's degree in a related field (Security, Forensics, or Computer Science is preferred)</li>
<li>5-7 years of overall IT professional experience or 3-4+ years of work experience Tier 1 and Tier 2 level security operations experience.</li>
<li>Desirable | Proven experience as a security and/or complianceanalyst, incident handler/responder, security engineer, or penetration tester.</li>
<li>Knowledge of security methodologies, processes (i.e., Cyber Kill Chain/Diamond Models, and the MITRE ATT&amp;CK framework).</li>
<li>Knowledge of technical security solutions (firewalls, SIEM, NIDS/NIPS/HIDS/HIPS, AV, DLP, proxies, network behavioral analytics, endpoint, and cloud security).</li>
<li>In-depth knowledge of TCP/IP, UDP, DNS, FTP, SSH, SSL/TLS and HTTP Protocols, network analysis, and network/security applications.</li>
<li>Good knowledge of common malware threats and attack methodologies.</li>
<li>Desirable Professional Certifications: GCIA, GCIH, GCFE, GCFA, Security+, CCNA CyberOps, OSCP, GPEN, GWAPT, CEH, </li>
</ul>
Core Competencies
<ul>
<li>Accountable for the successful completion of multiple, individual projects simultaneously.</li>
<li>Communicate effectively by contributing significantly to the development and delivery of a variety of written and visual documents for diverse audiences.</li>
<li>Manage change and demonstrate adaptability by adjusting priorities or processes and approaching as needs dictate.</li>
<li>Work independently as a team representative of Information Security as well as showing excellent teamwork skills.</li>
<li>Ability to develop thorough documentation and operational playbooks, in addition, to suggest alert enhancements to improve detection capability.</li>
<li>Fundamental knowledge of network and system technologies and practices</li>
</ul>
Teams Culture &amp; Values
<ul>
<li>The Cybersecurity Team is comprised of independent thinkers and doers who can positively impact our clients and shape Apex Fintech Solutions business and security posture.</li>
<li>The Cybersecurity Team to build and maintain a collaborative environment and engaging work—guided by Open and Honest Communication; Teamwork and Collaboration; Involving Everyone; Leaders Who Serve; and Personal Accountability</li>
</ul>


Apex currently requires all employees as a condition of employment to either be fully vaccinated for COVID-19 or submit to regular testing. The CDC defines "fully vaccinated" as two weeks after the second dose for Pfizer and Moderna, and two weeks after the single dose of Johnson &amp; Johnson. Apex will also require proof of vaccination and/or testing. Apex will also consider requests for exemption from these requirements as a reasonable accommodation for medical reasons or sincerely held religious beliefs. *Please note this requirement is ONLY for US Offices.

Dallas Castle

Security Operations Analyst

Maveris

Maveris is an IT and cybersecurity services company committed to helping organizations create secure digital solutions to accelerate their mission. We are Veteran-owned and proud to serve customers across the Federal Government and private sector. We have an opening for a full-time, permanent Cyber Security Defense Analyst to join our talented, dynamic team in support of the Department of Veterans Affairs customer.Veterans are encouraged to apply. The Cyber Security Threat Hunter will be part of a team that creates hypothesis driven investigations to search out Advanced Persistent Threats and Focused Operators. The individual will need to possess the ability to work well both individually and as part of a team with a shared mission.Key Responsibilities:<ul> <li>Provide proactive Advanced Persistent Threat (APT) and Focused Operator (FO) hunting, incident response support, and advanced analytic capabilities</li> <li>Profile and track APT/FO actors that pose a threat in coordination with threat intelligence support teams</li> <li>Review and analyze log files from various sources such as SIEM, packet captures, and host logs to report any unusual or suspect activities</li> <li>Develop and execute custom scripts to identify host-based indicators of compromise</li> <li>Provide targeted attack detection and analysis, including the development of custom signatures and log queries and analytics for the identification of targeted attacks</li> <li>Determine scope of intrusion identifying the initial point of access or source</li> <li>Recommend remediation activities to secure the source or initial point of access of intrusion</li> <li>Communicate effectively to all customers and stakeholders</li> <li>Provide executive level cyber security strategic recommendations along with security engineering recommendations and custom solutions to counter adversarial activity</li> <li>Provide technical summary of findings in accordance with established reporting procedures</li> <li>Provide identification of obfuscation techniques</li> <li>Knowledge of and ability to apply cybersecurity and privacy principles to organizational requirements (relevant to confidentiality, integrity, availability, authentication, non-repudiation)</li> <li>Knowledge of and ability to apply techniques for detecting host and network-based intrusions using intrusion detection technologies</li> <li>Knowledge of and ability to utilize cyber defense and vulnerability assessment tools</li> <li>Knowledge of vulnerability information dissemination sources (e.g., alerts, advisories, errata, and bulletins)</li> <li>Knowledge of what constitutes a network attack and a network attack’s relationship to both threats and vulnerabilities</li> <li>Knowledge of Insider Threat investigations, reporting, investigative tools and laws/regulations</li> <li>Knowledge of adversarial tactics, techniques, and procedures</li> <li>Knowledge of the common attack vectors on the network layer</li> <li>Knowledge of different classes of attacks (e.g., passive, active, insider, close-in, distribution attacks)</li> <li>Knowledge of cyber attackers (e.g., script kiddies, insider threat, non-nation state sponsored, and nation sponsored)</li> <li>Knowledge of cyber attack stages (e.g., reconnaissance, scanning, enumeration, gaining access, escalation of privileges, maintaining access, network exploitation, covering tracks)</li> <li>Skilled in using security event correlation tools</li> <li>Knowledge of and ability to utilize malware analysis concepts and methodologies</li> </ul>Requirements<ul> <li>Experience with common threat hunting solutions including Splunk, packet analysis (e.g., Wireshark), Netflow, QRadar or other SIEMs, etc.</li> <li>An understanding of the MITRE ATT&amp;CK Framework and Cyber Kill Chain methodologies</li> <li>Experience with threat hunting advanced persistent threats</li> <li>In depth understanding of NIST SP 800-61, US CERT, and Office of Management and Budget (OMB) standards</li> <li>Scripting experience, such as Python, PowerShell, etc. is a plus</li> <li>Strong time management skills with attention to detail</li> <li>Strong critical thinking skills</li> <li>Strong interpersonal and collaborative skills, with the ability to work in a team environment</li> <li>Ability to communicate effectively to both technical and non-technical audiences</li> <li>Skilled in developing and deploying signatures</li> <li>Skilled in detecting host and network-based intrusions via intrusion detection technologies</li> <li>Skilled in determining how a security system should work (including its resilience and dependability capabilities) and how changes in conditions, operations, or the environment will affect these outcomes</li> <li>Skilled in collecting data from a variety of cyber defense resources</li> <li>Skilled in recognizing and categorizing types of vulnerabilities and associated attacks</li> <li>Skilled in reading and interpreting signatures (e.g., snort)</li> <li>Skilled in assessing security controls based on cybersecurity principles and tenets. (e.g., CIS CSC, NIST SP 800-53, Cybersecurity Framework, etc.)</li> <li>Skilled in performing packet-level analysis</li> <li>Able to develop content for cyber defense tools</li> <li>Characterize and analyze network traffic to identify anomalous activity and potential threats to network resources</li> <li>Coordinate with enterprise-wide cyber defense staff to validate network alerts</li> <li>Perform cyber defense trend analysis and reporting</li> <li>Perform event correlation using information gathered from a variety of sources within the enterprise to gain situational awareness and determine the effectiveness of an observed attack</li> <li>Receive and analyze network alerts from various sources within the enterprise and determine possible causes of such alerts.</li> <li>Ability to determine tactics, techniques, and procedures (TTPs) for intrusion sets</li> <li>Ability to conduct research, analysis, and correlation across a wide variety of all source data sets (indications and warnings)</li> <li>Ability to reconstruct a malicious attack or activity based off network traffic</li> <li>Assist in the construction of signatures which can be implemented on cyber defense network tools in response to new or observed threats within the network environment or enclave.</li> <li>Notify designated managers, cyber incident responders, and cybersecurity service provider team members of suspected cyber incidents and articulate the event's history, status, and potential impact for further action in accordance with the organization's cyber incident response plan.</li> <li>Analyze and report organizational security posture trends.</li> <li>Analyze and report system security posture trends</li> <li>Monitor external data sources (e.g., cyber defense vendor sites, Computer Emergency Response Teams, Security Focus) to maintain currency of cyber defense threat condition and determine which security issues may have an impact on the enterprise</li> <li>Provides cybersecurity recommendations to leadership based on significant threats and vulnerabilities</li> <li>Participation in rotational on-call support</li> </ul><h3>Relevant certifications and training preferred:</h3><ul> <li>GIAC Certified Incident Handler (GCIH)</li> <li>GIAC Certified Forensics Examiner (GCFE)</li> <li>GIAC Certified Intrusion Analyst (GCIA)</li> <li>GIAC Certified Forensic Analyst (GCFA)</li> <li>GIAC Certified Network Forensic Analyst (GNFA)</li> <li>GIAC Cyber Threat Intelligence (GCTI)</li> <li>GIAC Reverse Engineering Malware (GREM)</li> </ul>BenefitsMaveris attracts and retains talent of the highest caliber by offering opportunities to work in exciting and challenging environments surrounded by bright minds. Our employees are our most prized asset and are rewarded with highly competitive compensation and a top-tier benefits package, including:<ul> <li>401(k) with company match</li> <li>Dental Insurance</li> <li>Health Insurance</li> <li>Vision Insurance</li> <li>Life Insurance</li> <li>Paid Time Off</li> </ul><h3>About Maveris</h3>Maveris offers exceptional, mission-focused, solutions to organizations facing highly complex IT, digital, and cybersecurity challenges. Our success is achieved by maintaining an environment of trust where people are encouraged to reach their fullest potential. Every candidate that applies to Maveris brings something unique to the table, and because our team is diverse, we consistently meet our goals and exceed client expectations. If you are a highly-motivated person with a willingness to learn, we invite you to apply today to join our team!To learn more about employee benefits visit <a href="http://www.maveris.com/" rel="noopener noreferrer nofollow ugc" target="_blank">www.maveris.com</a>.For company updates and the latest job postings check us out on <a href="https://www.linkedin.com/company/maveris" rel="noopener noreferrer nofollow ugc" target="_blank">LinkedIn</a>.If you'd like to read about some of our research and projects head over to <a href="https://medium.com/maverislabs" rel="noopener noreferrer nofollow ugc" target="_blank">Maveris Labs</a>.Want a more behind the scenes view? Check out our blog <a href="https://maveris.com/insights/" rel="noopener noreferrer nofollow ugc" target="_blank">Maveris Insights</a> to learn more about the team behind the solutions.

Hines

Cyber Security Threat Hunter

Arctic Wolf Networks

Ready to make an impact? Arctic Wolf is looking for an Application Security Architect to join our pack.
Arctic Wolf, with its unicorn valuation, is the leader in security operations in an exciting and fast-growing industry—cybersecurity.
How fast are we growing? Well, Arctic Wolf was highly ranked in the Deloitte Fast Technology 500 for NorthAmerica in both 2019 (#25) and 2020 (#104)! We have doubled headcount, customers, and revenue for five years running. We are also cultivating a collaborative and productive work environment that welcomes a diversity of backgrounds, cultures, and ideas to make our teams even stronger as we grow our teams globally.
In fact, we were named a 2021 Top Workplace USA (Energage) as the top technology firm to work in our size category, were recognized as one of the 2020 Best Places to Work (bizjournals.com), and most recently were certified as a 2021 Great Place to Work (Great Places to Work Institute, Canada). Arctic Wolf believes in corporate responsibility, and our worldwide offices proudly participate in volunteer programs throughout their communities. We’ve also earned distinction from TravelWise for our efforts in promoting sustainable transportation.
Position Overview and Objective
The Lead Application Security Architect role is responsible for the implementation of measures to ensure the security of Arctic Wolf software systems, applications, code, and related components. This role will work within our Information Security Engineering team to deploy and operationalize technical security capabilities with open collaboration with the Research and Development Team.
Primary Responsibilities and Duties
<ul>
<li>Develop secure coding &amp; secure design principles</li>
<li>Train developers, architects, code reviewers, and others on secure coding practices. Mentor team members.</li>
<li>Serve as the subject matter expert for Application Security, providing guidance to Engineering and Product teams</li>
<li>Develop standards and training for security testing tools focused on the application layer (e.g., SAST, DAST, IAST, SCA), threat modeling, penetration testing, red team, bug bounty and</li>
<li>Work with development teams throughout the entire SDLC to ensure code is secure by design, secure by default, secure in deployment and communication</li>
<li>Help software development teams to understand, and remediate security findings</li>
<li>Research any reported or suspected application vulnerabilities</li>
<li>Implement and configure off-the-shelf application security technologies in the Arctic Wolf internal environment.</li>
<li>Create technical approaches to implementing application security control technologies.</li>
<li>Contribute to a world-class security program that supports Arctic Wolf’s tremendous growth.</li>
<li>Mentors and coaches team members to further develop competencies</li>
<li>Assist in developing security related libraries used in our environment</li>
<li>Security metrics delivery and improvements.</li>
<li>The ability to effectively partner and communicate with Engineering and Product teams</li>
</ul>
Key Skills
Communication, Threat modeling, Code Review, Penetration Testing, Application Testing, Research
Key Competencies
Is able to write clearly and succinctly in a variety of communication settings and styles; can get messages across that have the desired effect.
Comes up with a lot of new and unique ideas; easily makes connections among previously unrelated notions; tends to be seen as original and value-added in brainstorming settings.
Can be counted on to exceed goals successfully; is constantly and consistently one of the top performers; very bottom-line oriented; steadfastly pushes self and others for results.
Minimum Qualifications
<ul>
<li>A Bachelor’s Degree in Computer Science, Information Systems, Engineering, cybersecurity or related technical field; or equivalent experience.</li>
<li>10+ years of experience in security or infrastructure engineering Including assessing and escalating to vendors for troubleshooting purposes.</li>
<li>Thorough Understanding of modern software development practices</li>
<li>Thorough understanding of OWASP Top 10 vulnerabilities and corresponding best practices for mitigation</li>
<li>Significant experience in deploying application security technologies such as SAST, DAST, IAST, SCA, etc.</li>
</ul>
Preferred Qualifications
<ul>
<li>Familiarity with cloud infrastructures, with Amazon Web Services (AWS) and/or Azure considered a strong plus.</li>
<li>Expert level analytical and quantitative skills with proven experience in developing strategic solutions</li>
<li>Significant prior experience securing large-scale web applications, including performing security code reviews, vulnerability assessments, and manual testing for logic flaws</li>
<li>Significant Experience in one or more highly regulated environments (FedRAMP, SOX, ISO 27001, etc) or frameworks</li>
<li>Presentation of a security topic and an industry conference</li>
<li>One a more Industry Certifications – (CISSP, CCSP, CSLP, OSCP, OSWE, GPEN, GWAPT, CEH, etc)</li>
</ul>
Travel Requirements
Typically 10% or less of business travel
Security Requirements:
<ul>
<li>Conducts duties and responsibilities in accordance with AWN’s Information Security policies, standards, processes and controls to protect the confidentiality, integrity and availability of AWN business information.</li>
<li>Background checks are required for this position</li>
</ul>
About us:
At Arctic Wolf, we recognize that success comes from delighting our customers. We believe in being lean – in constantly building, measuring, and learning in all aspects of our business. We truly value people. All wolves are welcome to join the Arctic Wolf pack, with compelling compensation packages, benefits, and equity for employees.
Arctic Wolf is focused on building a workforce that is diverse and inclusive. If you’re excited about this role, but do not meet all of the qualifications listed above, we encourage you to apply. We review all applications.  
Arctic Wolf is an Equal Opportunity Employer and considers applicants for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, genetics, or any other basis forbidden under federal, provincial, or local law.
Arctic Wolf is committed to fostering a welcoming, accessible, respectful and inclusive environment ensuring equal access and participation for people with disabilities. As such, we strive to make our recruitment, assessment and selection processes as accessible as possible and provide accommodations as required for applicants with disabilities. Please let us know if you require any accommodations by emailing <a href="mailto:hr@arcticwolf.com" rel="noopener noreferrer nofollow ugc" target="_blank">recruiting@arcticwolf.com</a>.

Provo

Principal Application Security Architect

Cloudflare, Inc.

About Us

At Cloudflare, we have our eyes set on an ambitious goal: to help build a better Internet. Today the company runs one of the world’s largest networks that powers approximately 25 million Internet properties, for customers ranging from individual bloggers to SMBs to Fortune 500 companies. Cloudflare protects and accelerates any Internet application online without adding hardware, installing software, or changing a line of code. Internet properties powered by Cloudflare all have web traffic routed through its intelligent global network, which gets smarter with every request. As a result, they see significant improvement in performance and a decrease in spam and other attacks. Cloudflare was named to Entrepreneur Magazine’s Top Company Cultures list and ranked among the World’s Most Innovative Companies by Fast Company. 
We realize people do not fit into neat boxes. We are looking for curious and empathetic individuals who are committed to developing themselves and learning new skills, and we are ready to help you do that. We cannot complete our mission without building a diverse and inclusive team. We hire the best people based on an evaluation of their potential and support them throughout their time at Cloudflare. Come join us! 
<h4>About the Department</h4>
Emerging Technologies &amp; Incubation (ETI) is where new and bold products are built and released within Cloudflare.  Rather than being constrained by the structures which make Cloudflare a massively successful business, we are able to leverage them to deliver entirely new tools and products to our customers.  Cloudflare’s edge and network make it possible to solve problems at massive scale and efficiency, which would be impossible for almost any other organization.

About the Role
Cloudflare is a system spanning the globe, on a mission to make the internet better, safer, and more powerful everyday.  To help fulfill this mission, we are seeking a talented Threat Researcher to join us in growing our Threat Intelligence Organization, where you will be instrumental in building a proactive and threat intelligence-driven approach to protecting Cloudflare and its customers from sophisticated and ever-evolving global threat actors.  This position requires an innovative, OPSEC-savvy, self-starting, and detail-oriented problem solver with a passion for identifying, tracking, and defeating sophisticated cyber threats.
As a Threat Researcher, your analytical thinking and quick action will be the key to our success.  You will serve an integral role in the discovery and analysis of cyber threat adversaries, their Tactics, Techniques, and Procedures (TTPs), along with applying knowledge of transnational issues and geopolitical developments to understand adversary actions and anticipate their next moves.  In this position, you will develop and maintain sources of unique threat intelligence to enable analysis, as well as examine and mitigate threats in realtime, leveraging emerging technologies to build detections that protect millions of people from attack.  You will work in close collaboration with team members to develop new and innovative ways to present and interact with our unique insights, ranging from completion of finished intelligence products to development of advanced tactical and strategic countermeasures.  
Strong candidates will have excellent OSINT research skills, firsthand experience in Threat Intelligence (in particular, familiarity with advanced persistent threats), a strong technical foundation, practical knowledge of intelligence report writing, and ability to work well in a group of distributed remote team members.

Examples of desirable skills, knowledge and experience
<ul>
<li>Advanced communication (written and verbal) and presentation skills, both internally to CXO level and externally to customers</li>
<li>Strong knowledge in technical reporting and editing</li>
<li>Experience in one of the following: Packet, and/or Metadata analysis</li>
<li>Experience in network and/or host-based intrusion analysis</li>
<li>Understanding of the latest security trends as they relate to cyber threat adversary detection, response, and mitigation</li>
<li>Experience using a comprehensive data analysis platform and rule configuration, with ability to recognize patterns and transform data into useful information</li>
<li>Understanding of the cyber threat landscape, cyber intelligence, the intelligence lifecycle, and working knowledge of threat actors and their techniques</li>
<li>Experience tracking and analyzing cyber campaigns utilizing technical Indicators of Compromise (IOCs)</li>
<li>Ability to synthesize technical information and document it, in both a technical and non-technical manner, through written, graphical and verbal representation</li>
<li>One of the following:
<ul>
<li>BS in Computer Science, Information Technology, Information Security, Computer Security, Information Systems or related discipline, OR</li>
<li>Military training and experience in cyber intelligence, general intelligence studies, security studies, or related discipline</li>
</ul>
</li>
<li>At least 2 years experience in one or more of the following:
<ul>
<li>Intrusion analysis</li>
<li>Cyber threat hunting</li>
<li>Cyber threat intelligence</li>
<li>Incident response</li>
<li>Penetration testing</li>
<li>Network defense</li>
<li>Endpoint forensics</li>
<li>Malware analysis</li>
</ul>
</li>
<li>Desire to learn and improve</li>
<li>Willing and eager to share knowledge, and mentor</li>
</ul>

Bonus Points
<ul>
<li>Extensive knowledge of an advanced persistent threat (APT) group(s)</li>
<li>Experience in netflow analysis</li>
<li>Experience analyzing, tracking and defending against cyber threat campaigns</li>
<li>Familiarity with regular expressions and their practical application in tracking malicious activity</li>
<li>Working knowledge of SQL and devising SQL queries</li>
<li>Experience with detection development using YARA</li>
<li>Prior intelligence community background</li>
</ul>What Makes Cloudflare Special?
We’re not just a highly ambitious, large-scale technology company. We’re a highly ambitious, large-scale technology company with a soul. Fundamental to our mission to help build a better Internet is protecting the free and open Internet.
<a href="https://blog.cloudflare.com/protecting-free-expression-online/" rel="noopener noreferrer nofollow ugc" target="_blank">Project Galileo</a>: We equip politically and artistically important organizations and journalists with powerful tools to defend themselves against attacks that would otherwise censor their work, technology already used by Cloudflare’s enterprise customers--at no cost.
<a href="https://www.cloudflare.com/athenian/" rel="noopener noreferrer nofollow ugc" target="_blank">Athenian Project</a>: We created Athenian Project to ensure that state and local governments have the highest level of protection and reliability for free, so that their constituents have access to election information and voter registration.
<a href="https://blog.cloudflare.com/tag/path-forward/" rel="noopener noreferrer nofollow ugc" target="_blank">Path Forward Partnership</a>: Since 2016, we have partnered with Path Forward, a nonprofit organization, to create 16-week positions for mid-career professionals who want to get back to the workplace after taking time off to care for a child, parent, or loved one.
<a href="https://1.1.1.1/" rel="noopener noreferrer nofollow ugc" target="_blank">1.1.1.1</a>: We released<a href="https://1.1.1.1/" rel="noopener noreferrer nofollow ugc" target="_blank"> 1.1.1.1</a> to help fix the foundation of the Internet by building a faster, more secure and privacy-centric public DNS resolver. This is available publicly for everyone to use - it is the first consumer-focused service Cloudflare has ever released. Here’s the deal - we don’t store client IP addresses never, ever. We will continue to abide by our<a href="https://developers.cloudflare.com/1.1.1.1/privacy/public-dns-resolver" rel="noopener noreferrer nofollow ugc" target="_blank"> privacy commitment</a> and ensure that no user data is sold to advertisers or used to target consumers.
Sound like something you’d like to be a part of? We’d love to hear from you!
This position may require access to information protected under U.S. export control laws, including the U.S. Export Administration Regulations. Please note that any offer of employment may be conditioned on your authorization to receive software or technology controlled under these U.S. export laws without sponsorship for an export license.
Cloudflare is proud to be an equal opportunity employer.  We are committed to providing equal employment opportunity for all people and place great value in both diversity and inclusiveness.  All qualified applicants will be considered for employment without regard to their, or any other person's, perceived or actual race, color, religion, sex, gender, gender identity, gender expression, sexual orientation, national origin, ancestry, citizenship, age, physical or mental disability, medical condition, family care status, or any other basis protected by law. We are an AA/Veterans/Disabled Employer.
Cloudflare provides reasonable accommodations to qualified individuals with disabilities.  Please tell us if you require a reasonable accommodation to apply for a job. Examples of reasonable accommodations include, but are not limited to, changing the application process, providing documents in an alternate format, using a sign language interpreter, or using specialized equipment.  If you require a reasonable accommodation to apply for a job, please contact us via e-mail at hr@cloudflare.com or via mail at 101 Townsend St. San Francisco, CA 94107.

Germany

Threat Researcher

Recorded Future, Inc.

With more than 800 employees, $200M ARR in 2021, 1,400+ clients, and rapid year-over-year growth, Recorded Future is the world’s largest intelligence company!This Role: We are looking for a threat researcher for Insikt Group’s Operational Outcomes team, to focus on technical analysis working alongside our highly skilled members and providing assistance in research into threats to cloud security from both cybercriminal and APT activities. This role supports client-driven finished intelligence reports on a multitude of technical topics including analysis of malicious tools, infrastructure profiling, and threat actor tools, tactics, and procedures (TTPs). Previous research experience is required.
What You’ll Do as a Senior Cloud Threat Intelligence Analyst: 
<ul>
<li>The primary function of this role is responding to client requests for written reports that require performing technical threat intelligence research and analysis in response to high-priority client issues</li>
<li>Develop log-based, network-based, and host-based detection rules such as Sigma rules, SNORT rules, and YARA rules to detect APT or cybercriminal campaigns in line with Insikt research goals and customer needs</li>
<li>Research and develop guidance around cloud security best practices and mitigations for operational cloud environments.</li>
<li>Support other threat intelligence analysts to analyze threats to cloud security from advanced threat actors to develop leads and insights into actor infrastructure, tooling, and targeting.</li>
<li>Perform network analysis of malicious infrastructure.</li>
<li>Stay on top of developments within the cloud security landscape and track key developments by following publications, blogs, and mailing lists.</li>
</ul>
What You’ll Bring to the Senior Cloud Threat Intelligence Analyst role (Required):
<ul>
<li>BA/BS degree or equivalent experience in Computer Science, Computer Engineering, Information Security, or a related field</li>
<li>3+ years of experience in Information Security and/or Threat Intelligence</li>
<li>Experience conducting technical threat analysis</li>
<li>Experience writing log, network and endpoint signature detections using Sigma, SNORT and YARA</li>
<li>Scripting experience in Python, Go, Powershell, or Bash </li>
<li>Experience operating services using one of the major cloud service providers (Google Cloud, AWS, or Azure)</li>
<li>Knowledge of TCP/IP and other networking protocols</li>
<li>Familiarity with analytic tradecraft, intelligence analysis and writing techniques and methodologies</li>
<li>Ability to convey complex technical and non-technical concepts in verbal products and excellent writing skills</li>
</ul>
Additional Skills/Experience (preferred but not required):
<ul>
<li>MA/MS degree or equivalent experience in Computer Science, Computer Engineering, Information Security, or a related field.</li>
<li>Experience operating services using multiple cloud service providers</li>
<li>Experience developing threat detections for cloud environments</li>
<li>Experience with Windows, iOS, Android, MacOS or malware analysis</li>
<li>Experience managing small projects and processes</li>
<li>Experience working and communicating directly with clients</li>
<li>Knowledge of open source intelligence gathering tools and techniques</li>
</ul>Why should you join Recorded Future?Recorded Future employees (or “Futurists”), represent over 35 nationalities and embody our core values of being passionate, practicing inclusion, and acting ethically. Our dedication to empowering clients with intelligence to disrupt adversaries has earned us a 4.7-star user rating from Gartner and 8 of the top 10 Fortune 100 companies as clients.
Want more info? <a href="https://www.recordedfuture.com/blog/" rel="noopener noreferrer nofollow ugc" target="_blank">Blog &amp; Podcast</a>: Learn everything you want to know (and maybe some things you’d rather not know) about the world of cyber threat intelligence<a href="https://www.instagram.com/recordedfuture/" rel="noopener noreferrer nofollow ugc" target="_blank">Instagram</a> &amp; <a href="https://twitter.com/RecordedFuture" rel="noopener noreferrer nofollow ugc" target="_blank">Twitter</a>: What’s happening at Recorded Future<a href="https://therecord.media/" rel="noopener noreferrer nofollow ugc" target="_blank">The Record</a>: The Record is a cybersecurity news publication that explores the untold stories in this rapidly changing field<a href="https://www.recordedfuture.com/about/#history" rel="noopener noreferrer nofollow ugc" target="_blank">Timeline</a>: History of Recorded Future<a href="https://www.recordedfuture.com/news/recognition/" rel="noopener noreferrer nofollow ugc" target="_blank">Recognition</a>: Check out our awards and announcements

We are committed to maintaining an environment that attracts and retains talent from a diverse range of experiences, backgrounds and lifestyles.  By ensuring all feel included and respected for being unique and bringing their whole selves to work, Recorded Future is made a better place every day.If you need any accommodation or special assistance to navigate our website or to complete your application, please send an e-mail with your request to our recruiting team at <a href="mailto:careers@recordedfuture.com" rel="noopener noreferrer nofollow ugc" target="_blank">careers@recordedfuture.com</a> 
Recorded Future is an equal opportunity and affirmative action employer and we encourage candidates from all backgrounds to apply. Recorded Future does not discriminate based on race, religion, color, national origin, gender including pregnancy, sexual orientation, gender identity, age, marital status, veteran status, disability or any other characteristic protected by law.Recorded Future will not discharge, discipline or in any other manner discriminate against any employee or applicant for employment because such employee or applicant has inquired about, discussed, or disclosed the compensation of the employee or applicant or another employee or applicant.

Boston

Washington

Senior Cloud Threat Intelligence Analyst

Apply to APT Cyber Security Jobs in companies remotely and near you. New APT Cyber Security Jobs added daily.

Job Position and Company	Location	Tags	Posted
Security Operations Analyst at PEAK6	Full Time Soc Analyst Analyst Incident Response GCFA
Cyber Security Threat Hunter at Maveris	Full Time Forensic Analyst Incident Response GCFA
Principal Application Security Architect at Arctic Wolf Networks	Remote Full Time Red Team CCSP Application Security
Threat Researcher at Cloudflare, Inc.	Remote Full Time Incident Response APT Cloudflare
Senior Cloud Threat Intelligence Analyst at Recorded Future, Inc.	Remote Full Time Analyst Windows Android

APT Cyber Security Jobs

0 APT Cyber Security Jobs. Page 1 of 1

5 closed apt cyber security jobs:

Subscribe to the weekly
Cyber Security Jobs Newsletter

APT Cyber Security Jobs

All Cyber Security Jobs

Cyber Security Jobs by Category

APT Cyber Security Jobs

0 APT Cyber Security Jobs. Page 1 of 1

5 closed apt cyber security jobs:

Subscribe to the weekly Cyber Security Jobs Newsletter

APT Cyber Security Jobs

All Cyber Security Jobs

Cyber Security Jobs by Category

Subscribe to the weekly
Cyber Security Jobs Newsletter