Arctic Wolf Networks

Arctic Wolf, with its unicorn valuation, is the leader in security operations in an exciting and fast-growing industry—cybersecurity. We have won countless awards for our excellence in security operations and remain dedicated to providing an industry-leading customer and employee experience.
Our mission is simple: End Cyber Risk. We’re looking for a Senior Concierge Security Engineer to be part of making this happen.  
The Sr. Concierge Security Engineer (CSE) is critical to delivering world-class Arctic Wolf security services.  The CSE owns the security relationship with their assigned customers and leverages their cross-domain expertise to fulfill these key responsibilities:
<ul>
<li>Primary cybersecurity technical point of contact for customers;</li>
<li>Create and maintain an outstanding partnership with customers;</li>
<li>Implement, manage and support the direct delivery of Arctic Wolf network and endpoint security solutions to customers;</li>
<li>Action customer requests in a timely manner, including directing and coordinating efforts with other teams, as needed.</li>
<li>Proactively interact and communicate with internal and external stakeholders;</li>
<li>Mentor junior security analysts and engineers to support their professional growth.</li>
</ul>
The CSE role combines aspects of an IT Security Analyst, a Security Architect, and an Incident Response Consultant.  A successful CSE possesses a strong ability to communicate, educate, and share information effectively with non-technical people.
Who You Are:
You thrive in fast-paced environments and have a positive can-do attitude.  You are a critical thinker that continually learns and can navigate uncertainty.  You enjoy working with customers and in a team, are an excellent communicator, and are able easily interact with a variety of people, personalities and technical skill levels.  Above all, your passion for cybersecurity and partnering with customers shows in everything you do!
You possess these required skills and experience:
<ul>
<li>7+ years of experience in a hands-on security role with a strong knowledge of security architecture</li>
<li>BS Degree in a relevant field or certifications and experience equivalent</li>
<li>Stellar partnering and relationship building skills in a professional context</li>
<li>Excellent communication skills, both written and verbal</li>
<li>Strong understanding of a defense-in-depth cybersecurity model</li>
<li>Strong knowledge of and experience using and securing Windows and Linux/Unix operating systems</li>
<li>Strong understanding of enterprise IT security solutions, including: Firewalls, Intrusion Detection Systems, Antivirus, Content Filtering, and Proxies</li>
<li>Strong experience and understanding of enterprise IT operations, including: Networking, Windows Active Directory, LDAP, Server Administration, and Cloud Infrastructure</li>
<li>Strong analytical and problem-solving skills</li>
<li>Experience with Security Information and Event Management (SIEM) tools</li>
<li>Basic understanding of secure DevOps principles for working in the cloud</li>
<li>Familiarity with scripting tools and languages such as Python, Bash, and Power Shell</li>
</ul>
And you may have these additional skills and experience:
<ul>
<li>Security testing and forensics tools</li>
<li>Malware analysis</li>
<li>Incident response</li>
<li>Authentication and identity management</li>
<li>Risk management, assessment and common compliance frameworks</li>
<li>Penetration testing and attack simulation</li>
</ul>
Bonus Points:
<ul>
<li>Speaking at conferences and writing technical blog posts, particularly in the Cybersecurity space</li>
<li>Proficiency in multiple spoken languages is a definite plus. Proficiency in English, both written and spoken communication is required.</li>
</ul>
About Arctic Wolf 
At Arctic Wolf we’re cultivating a collaborative and productive work environment that welcomes a diversity of backgrounds, cultures, and ideas to make our teams even stronger as we grow globally. We’ve been named one of the 50 Most Innovative Companies in the world for 2022 (Fast Company)—and the 2nd Most Innovative Security Company. This is in addition to consecutive awards from Top Workplace USA (2021, 2022), Best Places to Work - USA (2021, 2022) and Great Place to Work - Canada (2021, 2022). 
Our Values
Arctic Wolf recognizes that success comes from delighting our customers, so we work together to ensure that happens every day. We believe in diversity and inclusion, and truly value the unique qualities and unique perspectives all employees bring to the organization. And we appreciate that—by protecting people’s and organizations’ sensitive data and seeking to end cyber risk— we get to work in an industry that is fundamental to the greater good. 
We celebrate unique perspectives by creating a platform for all voices to be heard through our Pack Unity program. We encourage all employees to join or create a new alliance. See more about our Pack Unity <a href="https://arcticwolf.com/company/careers/diversity-equity-inclusion-and-belonging/" rel="noopener noreferrer nofollow ugc" target="_blank">here</a>.  
We also believe and practice corporate responsibility, and have recently joined the Pledge 1% Movement, ensuring that we continue to give back to our community. We know that through our mission to End Cyber Risk we will continue to engage and give back to our communities. 
All wolves receive compelling compensation and benefits packages, including: 
<ul>
<li>Equity for all employees</li>
<li>Flexible time off, paid volunteer days and paid parental leave</li>
<li>RRSP and 401k match</li>
<li>Training and career development programs</li>
</ul>
 Arctic Wolf is an Equal Opportunity Employer and considers applicants for employment without regard to race, color, religion, sex, orientation, national origin, age, disability, genetics, or any other basis forbidden under federal, provincial, or local law. Arctic Wolf is committed to fostering a welcoming, accessible, respectful, and inclusive environment ensuring equal access and participation for people with disabilities. As such, we strive to make our entire employee experience as accessible as possible and provide accommodations as required for candidates and employees with disabilities and/or other specific needs where possible. Please let us know if you require any accommodations by emailing <a href="mailto:recruiting@arcticwolf.com" rel="noopener noreferrer nofollow ugc" target="_blank">recruiting@arcticwolf.com</a>. 
Security Requirements 
<ul>
<li>Conducts duties and responsibilities in accordance with AWN’s Information Security policies, standards, processes and controls to protect the confidentiality, integrity and availability of AWN business information (in accordance with our employee handbook and corporate policies).</li>
<li>Background checks are required for this position.</li>
</ul>

Australia

Senior Concierge Security Engineer

XOR Security

<h3>Job Description:</h3>
XOR Security is currently seeking talented SOC Analyst for an exciting position supporting one of our premier clients. Our project is aimed at establishing cutting-edge techniques for network defense, identifying threats and detecting malicious activity using advanced toolsets. 
The ideal candidate will have hands-on experience as a SOC analyst performing Incident Response and Intrusion Detection on an operational Federal network.  The candidate will Monitor and analyze network traffic, Intrusion Detection Systems (IDS), security events and logs and provide a technical resource and escalation point for tier 1 analysts.  The candidate will perform incident response to investigate and resolve security incidents.  The candidate will need to be able to determine between false and true positives events, prioritizing them appropriately and see them through from end to end.  Additionally, the candidate will perform or review root cause analysis efforts following incident recovery.  The candidate will compose security alert notifications and other communications on behalf of the SOC.
In addition, the candidate will need to stay up to date with current vulnerabilities, attacks, and countermeasures.  The candidate will Develop follow-up action plans to resolve reportable issues and communicate with the other technologists to address security threats and incidents.  Also, the candidate will Regularly develop new use cases for automation and tuning of security tools.  The candidate will Define and create privacy and security reportable issues metrics and reports.  The candidate will need to contribute to security strategy and security posture by identifying security gaps, evaluate and implement enhancements.  The ideal candidate will possess a strong technical expertise of log and monitoring management systems, security event monitoring systems, network-based and host-based intrusion detection systems, firewall technologies, malware detection and enterprise-level antivirus solutions/systems, VPN technologies and encryptions standards
Location:
Washington D.C., USA
Schedule:
6am - 2pm or 10am - 6pm. Analyst should be flexible for both for potential rotation.
<h3>Skills and Qualifications:</h3>
<h4>Required Qualifications:</h4>
<ul>
<li>An industry technical certification such as GCIH</li>
<li>Experience with tools such as Active Directory, Cisco IOS, MS Server, ESA, WSA, Stealthwatch, AMP, Splunk, FortiSIEM, SNORT, Yara, IronPort, and Firepower.</li>
<li>Experience with deployment and documentation of enterprise project management and change management processes</li>
<li>Ability to identify solutions to potential network issues/embrace network simplification and strengthened security</li>
<li>Ability to conduct event triage and analysis and incident investigation</li>
<li>Three (3) years of experience in network defense environments</li>
</ul>
<h4>Desired Qualifications:</h4>
<ul>
<li>Understanding of command line scripting and implementation (e.g., Python, Powershell)</li>
<li>Ability to write new content/searches/scripts (e.g., Splunk dashboards, Splunk ES alerts, SNORT signatures, Python scripts, Powershell scripts)</li>
<li>Familiarity with Splunk Enterprise Security</li>
<li>Strong understanding of networking (TCP Flags, TCP Handshake, IP addressing, Firewalls, Proxy, IDS, IPS)</li>
<li>Ability to perform Netflow / packet capture (PCAP) analysis</li>
<li>Experience with cyber threat hunting</li>
<li>Bachelor’s Degree in Computer Science, Computer Engineering, Information Systems or equivalent experience</li>
</ul>
<h3>Closing Statement:</h3>
XOR Security offers a very competitive benefits package including health insurance coverage from the first day of employment, 401k with a vested company match, vacation and supplemental insurance benefits.
XOR Security is an Equal Opportunity Employer (EOE). M/F/D/V.
Citizenship Clearance RequirementApplicants selected may be subject to a government security investigation and must meet eligibility requirements - US CITIZENSHIP and PUBLIC TRUST CLEARANCE REQUIRED.

Washington

Mid Level SOC Analyst

ID.me

<h3>Company Overview</h3>
ID.me simplifies how people securely prove and share their identity online. The company empowers people to control their data through a portable and trusted login, which means they don’t need to create a new password when visiting sites that have the ID.me button.
The COVID-19 pandemic accelerated digital migration for many critical services. Those services require a trusted identity to safeguard against fraud and help ensure people are who they claim to be. With ID.me, login and identity credentials move with people, which can reduce the time and frustration of having to verify at multiple sites and set up multiple passwords.
ID.me is a credential service provider compliant with federal standards for digital identity verification. 
In addition to helping people control their credentials and data, the company’s “No Identity Left Behind” initiative strives to expand access and inclusion for all people. The company offers multiple pathways to verification – online self-serve, live video chat agents, and in person. ID.me is passionate about building a robust identity network that does not compromise access for traditionally underserved groups.<h3>Role Overview</h3>
ID.me is looking for a Senior Security Engineer to add to our rapidly growing security team. If you love innovation, here's your chance to make a career of it by advancing the digital identity ecosystem. We are seeking a talented Senior Security Engineer who enjoys the challenges of planning, implementing, and upgrading security measures and controls, to include: Cloud Security and Automation, Security Information and Event Management (SIEM) tools, Intrusion Detection and Prevention Systems (IDS/IPS), enterprise security, and other associated tools. 
The Senior Security Engineer will also have the opportunity to innovate by building tools to help create a highly integrated security environment, and see around corners. The team owns the end-to-end security of all systems and data for ID.me, and our Security Engineers are passionate about security and working in a fast-paced, ambiguous environment.
<h3>Responsibilities</h3>
<ul>
<li>Defend systems against unauthorized access, modification, and/or destruction</li>
<li>Contribute to security architecture and operations</li>
<li>Design, deploy and optimize security tools such as a SIEM, IDS/IPS, EDR, firewalls, etc</li>
<li>Troubleshoot systems to determine the root cause of issues impacting security infrastructure</li>
<li>Act as an escalation point for security analyst and a resource during incident response</li>
<li>Lead security integration and automation to improve detection, monitoring, and response</li>
<li>Collaborate with cross-functional groups such as DevOps, Software Engineering, etc</li>
<li>Build security orchestration and automation tools to improve preventative and detective controls</li>
</ul>
<h3>Ideal Qualifications</h3>
The qualifications below are ideal, but not all are required.  We encourage candidates to apply if they satisfy some, but not all of the qualifications.
<ul>
<li>7+ years of experience in information security</li>
<li>5+ years experience engineering, implementing, and optimizing security measures for the protection of systems, networks, and information</li>
<li>3+ years of experience supporting a Security Operations Center (SOC) or similar</li>
<li>Hands on experience with SIEM and centralized logging technologies (e.g. Splunk, Elastic, etc)</li>
<li>Experience with Security Orchestration, Automation, and Response (SOAR)</li>
<li>Strong capabilities leveraging scripting languages to automate work or build features (Bash, Python, and/or Ruby)</li>
<li>Experience securing cloud environments such as AWS, GCP, and/or Azure</li>
<li>Experience with configuration automation platforms (e.g. Chef, Ansible, Puppet, Salt, etc)</li>
<li>Bonus: Experience with Information Security Compliance, (SOC, FedRAMP, ISO, etc)</li>
<li>Bonus: Industry security certifications, such as GCIH/ECIH, Security+, or related</li>
</ul>
Ideal candidate will thrive in the following culture:
<ul>
<li>Must have an obsession for building quality products </li>
<li>Ability to thrive when there are changing priorities and shifting of gears</li>
<li>Strong oral and written communication skills</li>
<li>Must be a team player with a strong, self-managing work ethic</li>
<li>Must be a self-starter with a passion for security, learning and continuous improvement</li>
</ul>
Note that candidates must be located in the continental U.S.
ID.me Covid Vaccination Requirement
ID.me has a mandatory vaccination requirement where not prohibited by applicable federal or state law.
All current and future employees are required to receive their COVID-19 vaccinations, unless a reasonable accommodation is approved. Employees not in compliance with this policy will be placed on leave and will be terminated if no valid reason for not getting the COVID-19 vaccine is provided.  
Purpose: In accordance with ID.me's duty to provide and maintain a workplace that is free of known hazards, we are adopting this policy to safeguard the health of our employees and their families; our customers and visitors; and the community at large from COVID-19 that may be reduced by vaccinations. This policy will comply with all applicable laws and is based on guidance from the Centers for Disease Control and Prevention and local health authorities, as applicable.
Reasonable Accommodation: Current and future employees in need of an exemption from this policy due to a medical reason, or because of a sincerely held religious belief must submit a completed Request for Accommodation form to the human resources department to begin the interactive accommodation process as soon as possible after vaccination deadlines have been announced (September 13th) and an offer of employment has been made. Accommodations will be granted where they do not cause ID.me undue hardship or pose a direct threat to the health and safety of others.
Vision: To be the world's leading digital identity network empowering people to control their own information and to prove their credentials across all channels: online, call center, and in-person.
Mission: To make the world a more trusted place by delivering the highest level of security with the least amount of friction at the lowest possible cost.
People: We have an audacious mission. We aim to fix the identity layer of the internet. Billions of people will live better lives with more trust and convenience thanks to <a href="https://id.me/" rel="noopener noreferrer nofollow ugc" target="_blank">ID.me</a>. We are like Special Forces. We take on the most difficult challenges with amazing teammates. 
<a href="https://id.me/" rel="noopener noreferrer nofollow ugc" target="_blank">ID.me</a> Core Values: *Don't be a jerk. *Always compete. *Ask questions like a 5-year old. *Inspire people with your passion. *Make something better every day. *Treat each customer like your favorite family member. *Own your mistakes so you can learn from them. *Details are everything. *Communicate like a scientist. *Be truthful (even when it's hard). *Reflect <a href="https://id.me/" rel="noopener noreferrer nofollow ugc" target="_blank">ID.me</a>'s values in your actions. *Act like an owner.
ID.me Career Site &amp; Culture Deck: <a href="https://www.id.me/careers" rel="noopener noreferrer nofollow ugc" target="_blank">https://www.id.me/careers</a>
ID.me maintains a work environment free from discrimination, where employees are treated with dignity and respect. All ID.me employees share in the responsibility for fulfilling our commitment to equal employment opportunity. ID.me does not discriminate against any employee or applicant on the basis of age, ancestry, color, family or medical care leave, gender identity or expression, genetic information, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran status, race, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable laws, regulations and ordinances. ID.me adheres to these principles in all aspects of employment, including recruitment, hiring, training, compensation, promotion, benefits, social and recreational programs, and discipline. In addition, ID.me's policy is to provide reasonable accommodation to qualified employees who have protected disabilities to the extent required by applicable laws, regulations and ordinances where a particular employee works. Upon request we will provide you with more information about such accommodations.
 
Please review our Privacy Policy, including our CCPA policy, at <a href="http://id.me/privacy" rel="noopener noreferrer nofollow ugc" target="_blank">id.me/privacy</a>. If you provide ID.me with any personally identifiable information you confirm that you have read and agree to be bound by the terms and conditions set out in our Privacy Policy.
 
ID.me participates in E-Verify.
 

#LI-JS1
#LI-REMOTE

United States

Senior Security Engineer (Remote)

SciTec

SciTec, Inc. is a dynamic small business which delivers advanced sensor processing technologies and scientific instrumentation capabilities in support of national security and defense applications. We support customers throughout the Department of Defense and U.S. Government in building innovative new tools to deliver unique, world-class data exploitation capabilities. SciTec has an immediate opportunity for a talented Information Systems Security Manager (ISSM) in our Boulder, CO office. The ISSM will be responsible the accreditation and administration of a secure computing environment, both leading the implementation of technical security controls and spearheading coordination with accrediting and assessing agencies. The ISSM will need to work well in a team environment with a commitment to ensure security awareness and techniques are communicated effectively across the workforce. SciTec is searching for a candidate who will thrive in an environment where they are both expected to take the initiative to solve problems and empowered to see problems through to their conclusion.RequirementsDUTIES: <ul> <li>Leading the development, maintenance, and evaluation Information System (IS) security documentation, including System Security Plans (SSPs), Continuity of Operations Plans (COOPs), and Standard Operating Procedures (SOPs).</li> <li>Conducting cybersecurity controls assessments in accordance with applicable regulatory guidance, including NIST 800-53, NIST 800-37, NIST 800-60, and DoD 8500.01. Managing Plans of Actions and Milestones (POA&amp;M) originating from these assessments.</li> <li>Upload all security control evidence to the Governance, Risk, and Compliance (GRC) application (eMASS) to support security control implementation during the monitoring phase.</li> <li>Develop and execute a Continuous Monitoring program for information systems in accordance with NIST 800-53</li> <li>Ensure that selected security controls are implemented and operating as intended during all phases of the Information System (IS) lifecycle and RMF process</li> <li>Ensure that system security documentation is developed, maintained, reviewed, and updated on a continuous basis. </li> <li>Conduct required IS vulnerability scans according to risk assessment parameters. </li> <li>Continuously evaluating system security posture, identifying opportunities for improvement, and supporting the implementation of these improvements.</li> <li>Supporting the local SciTec Facility Security Officer (FSO) in ensuring the physical protection of information technology systems, including supporting the deployment of physical security measures such as intrusion detection systems.</li> <li>Contribute to Cybersecurity Maturity Model Certification (CMMC) and NIST SP 800-171 which may include authoring policy and procedure, capturing artifacts, and working related projects.</li> <li>Contributing to other corporate security and information assurance activities throughout the company with System Administrators, Security, and other stakeholders.</li> <li>Successful candidates will have strong written and communication skills to maintain a relationship with government counterparts and other mission partners.</li> <li>Ensure the removal and retirement of ISs being decommissioned in coordination with the system owner</li> <li>At least two years serving as an ISs Security Officer or Manager at a cleared facility. </li> <li>Familiarity with the use and operation of DISA SCAP and STIGViewer tools</li> </ul> <ul> <li>Is technical lead for the Risk Management Framework (RMF) package creation and compliance. </li> </ul> REQUIREMENTS: <ul> <li>Must be a U.S. Citizen. </li> <li>Candidates must have an active Secret government security clearance.</li> <li>2 years of experience specifically supporting the administration of government or contractor information technology systems under the oversight of the DoD or the Intelligence Community.</li> </ul> <ul> <li>4 year degree in Information Technology, Cybersecurity, Computer Science or other related field</li> <li>Must have experience with Windows/Linux based troubleshooting; understand where to locate specific log files for forensics.</li> </ul> <ul> <li>Ability to evaluate effectiveness, suitability, survivability, and interoperability of systems, relating to cybersecurity and provide key feedback to improve the overall cybersecurity posture. </li> <li>Ability to research and develop solutions to emerging cyber threats.</li> <li>Proficient with Microsoft Word, Microsoft Excel, OneDrive. </li> <li>Self-starter with ability to work independently.</li> <li>Ability to understand, explain, interpret, and apply rules, regulations, directives, and procedures.</li> </ul> PREFERRED EXPERIENCE, SKILLS, AND ABILITIES: <ul> <li>An active TOP SECRET clearance.</li> <li>A CISSP (or CISSP Associate) certification, or an alternate qualifying certification satisfying DoD 8570.01M requirements for an Information Assurance Technician Level III or an Information Assurance Manager Level II.</li> <li>Prior successful experience as an ISSM.</li> <li>Prior experience with NIST 800-171, NIST 800-53 (both DIACAP 8500.2 and Risk Management Framework), and Continuous Monitoring and Risk Scoring (CMRS).</li> <li>A college degree in computer science, info tech, info security, or a related field.</li> <li>Experience working with the ELK stack.</li> <li>Experience with Azure, AWS, or similar cloud environments.</li> <li>Have experience with VMware or other virtualization software.</li> <li>Python, PHP, Perl, PowerShell, or Bash scripting experience.</li> <li>Experience administering the system functions including security policies and account management of Microsoft Windows and Server as well as Linux/Unix-based systems.</li> <li>Incident response and reporting experience.</li> </ul>BenefitsAs a small business, SciTec, Inc. offers room for growth and a flexible, fast-paced work environment. We work daily to develop one-of-a-kind solutions for challenging national problems. SciTec encourages collaboration across our offices in Boulder, El Segundo, Dayton, Huntsville, Virginia, and our headquarters in Princeton, and provides access to opportunities across the corporate spectrum. Initiative is expected and encouraged, all employees have the opportunity and flexibility to broaden their technical horizons, and our daily work makes an impact on the world around us. SciTec offers a highly competitive salary and benefits package, including a variety of benefits including health insurance, parental leave, vision, life, and disability insurance, 401(k)plan with employer contribution, holidays and paid time off plans (including vacation and sick time), an annual profit-sharing plan, and an annual performance bonus plan. The salary range for this position is $83,000 to $130,000; however, SciTec considers several factors when extending an offer of employment, including but not limited to, the role and associated responsibilities, a candidate’s work experience, education/training, and key skills. This is not a guarantee of compensation. SciTec is committed to hiring and retaining a diverse workforce and is proud to be an Equal Opportunity/Affirmative Action employer.

Boulder

Information Systems Security Manager (ISSM)

Maveris

Maveris is an IT and cybersecurity services company committed to helping organizations create secure digital solutions to accelerate their mission. We are Veteran-owned and proud to serve customers across the Federal Government and private sector. We have an opening for a full-time, permanent Cyber Security Defense Analyst to join our talented, dynamic team in support of the Department of Veterans Affairs customer.Veterans are encouraged to apply. The Cyber Security Threat Hunter will be part of a team that creates hypothesis driven investigations to search out Advanced Persistent Threats and Focused Operators. The individual will need to possess the ability to work well both individually and as part of a team with a shared mission.Key Responsibilities:<ul> <li>Provide proactive Advanced Persistent Threat (APT) and Focused Operator (FO) hunting, incident response support, and advanced analytic capabilities</li> <li>Profile and track APT/FO actors that pose a threat in coordination with threat intelligence support teams</li> <li>Review and analyze log files from various sources such as SIEM, packet captures, and host logs to report any unusual or suspect activities</li> <li>Develop and execute custom scripts to identify host-based indicators of compromise</li> <li>Provide targeted attack detection and analysis, including the development of custom signatures and log queries and analytics for the identification of targeted attacks</li> <li>Determine scope of intrusion identifying the initial point of access or source</li> <li>Recommend remediation activities to secure the source or initial point of access of intrusion</li> <li>Communicate effectively to all customers and stakeholders</li> <li>Provide executive level cyber security strategic recommendations along with security engineering recommendations and custom solutions to counter adversarial activity</li> <li>Provide technical summary of findings in accordance with established reporting procedures</li> <li>Provide identification of obfuscation techniques</li> <li>Knowledge of and ability to apply cybersecurity and privacy principles to organizational requirements (relevant to confidentiality, integrity, availability, authentication, non-repudiation)</li> <li>Knowledge of and ability to apply techniques for detecting host and network-based intrusions using intrusion detection technologies</li> <li>Knowledge of and ability to utilize cyber defense and vulnerability assessment tools</li> <li>Knowledge of vulnerability information dissemination sources (e.g., alerts, advisories, errata, and bulletins)</li> <li>Knowledge of what constitutes a network attack and a network attack’s relationship to both threats and vulnerabilities</li> <li>Knowledge of Insider Threat investigations, reporting, investigative tools and laws/regulations</li> <li>Knowledge of adversarial tactics, techniques, and procedures</li> <li>Knowledge of the common attack vectors on the network layer</li> <li>Knowledge of different classes of attacks (e.g., passive, active, insider, close-in, distribution attacks)</li> <li>Knowledge of cyber attackers (e.g., script kiddies, insider threat, non-nation state sponsored, and nation sponsored)</li> <li>Knowledge of cyber attack stages (e.g., reconnaissance, scanning, enumeration, gaining access, escalation of privileges, maintaining access, network exploitation, covering tracks)</li> <li>Skilled in using security event correlation tools</li> <li>Knowledge of and ability to utilize malware analysis concepts and methodologies</li> </ul>Requirements<ul> <li>Experience with common threat hunting solutions including Splunk, packet analysis (e.g., Wireshark), Netflow, QRadar or other SIEMs, etc.</li> <li>An understanding of the MITRE ATT&amp;CK Framework and Cyber Kill Chain methodologies</li> <li>Experience with threat hunting advanced persistent threats</li> <li>In depth understanding of NIST SP 800-61, US CERT, and Office of Management and Budget (OMB) standards</li> <li>Scripting experience, such as Python, PowerShell, etc. is a plus</li> <li>Strong time management skills with attention to detail</li> <li>Strong critical thinking skills</li> <li>Strong interpersonal and collaborative skills, with the ability to work in a team environment</li> <li>Ability to communicate effectively to both technical and non-technical audiences</li> <li>Skilled in developing and deploying signatures</li> <li>Skilled in detecting host and network-based intrusions via intrusion detection technologies</li> <li>Skilled in determining how a security system should work (including its resilience and dependability capabilities) and how changes in conditions, operations, or the environment will affect these outcomes</li> <li>Skilled in collecting data from a variety of cyber defense resources</li> <li>Skilled in recognizing and categorizing types of vulnerabilities and associated attacks</li> <li>Skilled in reading and interpreting signatures (e.g., snort)</li> <li>Skilled in assessing security controls based on cybersecurity principles and tenets. (e.g., CIS CSC, NIST SP 800-53, Cybersecurity Framework, etc.)</li> <li>Skilled in performing packet-level analysis</li> <li>Able to develop content for cyber defense tools</li> <li>Characterize and analyze network traffic to identify anomalous activity and potential threats to network resources</li> <li>Coordinate with enterprise-wide cyber defense staff to validate network alerts</li> <li>Perform cyber defense trend analysis and reporting</li> <li>Perform event correlation using information gathered from a variety of sources within the enterprise to gain situational awareness and determine the effectiveness of an observed attack</li> <li>Receive and analyze network alerts from various sources within the enterprise and determine possible causes of such alerts.</li> <li>Ability to determine tactics, techniques, and procedures (TTPs) for intrusion sets</li> <li>Ability to conduct research, analysis, and correlation across a wide variety of all source data sets (indications and warnings)</li> <li>Ability to reconstruct a malicious attack or activity based off network traffic</li> <li>Assist in the construction of signatures which can be implemented on cyber defense network tools in response to new or observed threats within the network environment or enclave.</li> <li>Notify designated managers, cyber incident responders, and cybersecurity service provider team members of suspected cyber incidents and articulate the event's history, status, and potential impact for further action in accordance with the organization's cyber incident response plan.</li> <li>Analyze and report organizational security posture trends.</li> <li>Analyze and report system security posture trends</li> <li>Monitor external data sources (e.g., cyber defense vendor sites, Computer Emergency Response Teams, Security Focus) to maintain currency of cyber defense threat condition and determine which security issues may have an impact on the enterprise</li> <li>Provides cybersecurity recommendations to leadership based on significant threats and vulnerabilities</li> <li>Participation in rotational on-call support</li> </ul><h3>Relevant certifications and training preferred:</h3><ul> <li>GIAC Certified Incident Handler (GCIH)</li> <li>GIAC Certified Forensics Examiner (GCFE)</li> <li>GIAC Certified Intrusion Analyst (GCIA)</li> <li>GIAC Certified Forensic Analyst (GCFA)</li> <li>GIAC Certified Network Forensic Analyst (GNFA)</li> <li>GIAC Cyber Threat Intelligence (GCTI)</li> <li>GIAC Reverse Engineering Malware (GREM)</li> </ul>BenefitsMaveris attracts and retains talent of the highest caliber by offering opportunities to work in exciting and challenging environments surrounded by bright minds. Our employees are our most prized asset and are rewarded with highly competitive compensation and a top-tier benefits package, including:<ul> <li>401(k) with company match</li> <li>Dental Insurance</li> <li>Health Insurance</li> <li>Vision Insurance</li> <li>Life Insurance</li> <li>Paid Time Off</li> </ul><h3>About Maveris</h3>Maveris offers exceptional, mission-focused, solutions to organizations facing highly complex IT, digital, and cybersecurity challenges. Our success is achieved by maintaining an environment of trust where people are encouraged to reach their fullest potential. Every candidate that applies to Maveris brings something unique to the table, and because our team is diverse, we consistently meet our goals and exceed client expectations. If you are a highly-motivated person with a willingness to learn, we invite you to apply today to join our team!To learn more about employee benefits visit <a href="http://www.maveris.com/" rel="noopener noreferrer nofollow ugc" target="_blank">www.maveris.com</a>.For company updates and the latest job postings check us out on <a href="https://www.linkedin.com/company/maveris" rel="noopener noreferrer nofollow ugc" target="_blank">LinkedIn</a>.If you'd like to read about some of our research and projects head over to <a href="https://medium.com/maverislabs" rel="noopener noreferrer nofollow ugc" target="_blank">Maveris Labs</a>.Want a more behind the scenes view? Check out our blog <a href="https://maveris.com/insights/" rel="noopener noreferrer nofollow ugc" target="_blank">Maveris Insights</a> to learn more about the team behind the solutions.

Hines

Cyber Security Threat Hunter

Apply to Intrusion Detection Cyber Security Jobs in companies remotely and near you. New Intrusion Detection Cyber Security Jobs added daily.

Job Position and Company	Location	Tags	Posted
Senior Concierge Security Engineer at Arctic Wolf Networks	Remote Full Time Consultant Analyst Incident Response
Mid Level SOC Analyst at XOR Security	Full Time Soc Analyst Analyst Incident Response Active Directory
Senior Security Engineer (Remote) at ID.me	Remote Full Time Analyst Incident Response Ansible
Information Systems Security Manager (ISSM) at SciTec	Full Time Manager DOD Windows AWS
Cyber Security Threat Hunter at Maveris	Full Time Forensic Analyst Incident Response GCFA

Intrusion Detection Cyber Security Jobs

0 Intrusion Detection Cyber Security Jobs. Page 1 of 1

5 closed intrusion detection cyber security jobs:

Subscribe to the weekly
Cyber Security Jobs Newsletter

Intrusion Detection Cyber Security Jobs

All Cyber Security Jobs

Cyber Security Jobs by Category

Intrusion Detection Cyber Security Jobs

0 Intrusion Detection Cyber Security Jobs. Page 1 of 1

5 closed intrusion detection cyber security jobs:

Subscribe to the weekly Cyber Security Jobs Newsletter

Intrusion Detection Cyber Security Jobs

All Cyber Security Jobs

Cyber Security Jobs by Category

Subscribe to the weekly
Cyber Security Jobs Newsletter