Arctic Wolf Networks

Ready to make an impact? Arctic Wolf seeks a Senior Security Researcher to join our pack.
Arctic Wolf, with its unicorn valuation, is the leader in security operations in an exciting and fast-growing industry—cybersecurity. How fast are we growing? Well, Arctic Wolf was highly ranked in the Deloitte Fast Technology 500 for North America in both 2019 (#25) and 2020 (#104)! We have doubled headcount, customers, and revenue for five years running.
We are also cultivating a collaborative and productive work environment that welcomes a diversity of backgrounds, cultures, and ideas to make our teams even stronger as we grow our teams globally. In fact, we were named a 2021 Top Workplace USA (Energage) as the top technology firm to work in our size category, were recognized as one of the 2020 Best Places to Work (bizjournals.com), and most recently were certified as a 2021 Great Place to Work (Great Places to Work Institute, Canada).
Arctic Wolf believes in corporate responsibility, and our worldwide offices proudly participate in volunteer programs throughout their communities. We’ve also earned distinction from TravelWise for our efforts in promoting sustainable transportation.
About the Team
Arctic Wolf Labs is the research-focused division at Arctic Wolf focused on advancing innovation in the field of security operations. The mission of Arctic Wolf Labs is to develop cutting-edge technology and tools that are designed to enhance the company’s core mission to end cyber risk, while also bringing comprehensive security intelligence to Arctic Wolf’s customer base and the security community-at-large. Leveraging the more than two trillion security events the Arctic Wolf Security Operations Cloud ingests, parses, enriches, and analyzes each week, Arctic Wolf Labs is responsible for performing threat research on new and emerging adversaries, developing advanced threat detection models, and driving improvement in the speed, scale, and detection abilities of Arctic Wolf’s solution offerings. The Arctic Wolf Labs team comprises security and threat intelligence researchers, data scientists, and security development engineers with deep domain knowledge in artificial intelligence (AI), security R&amp;D, as well as advanced threat offensive and defensive methods and technologies.
About the Role
A Senior Security Researcher is a senior security subject matter expert in the areas of threat/malware analysis, vulnerability research, reverse engineering and advanced threat prevention/detection/analysis technologies and methods. You will work closely with stakeholders in our product management, Security Services, Threat Intelligence Research, Security Analytics, Managed Detection &amp; Response (MDR), and Managed Risk (MR) teams to support our product development mandates including the development of advanced detections and vulnerability analysis for the endpoint, network and cloud domains. You will be involved in the development of our predictive threat defence systems/frameworks and will also participate in continually evaluating our security platforms against the latest threats and adversarial methods to identify gaps and research/prototype new solutions to address them.
Responsibilities Include:
<ul>
<li>
Analyze technical threats and data to research: TTPs, new ransomware/malware techniques, use of non-malicious tooling for attacks (e.g. LOL bins, penetration testing tools, etc.), and other adversarial methods.
</li>
<li>
Develop and maintain threat/malware analysis tooling/methods
</li>
<li>
Reverse engineering and analyzing novel threats/malware including evasions and the bypassing of protections
</li>
<li>
Research and analyze emerging vulnerabilities and their possible exploitations with a focus on how to detect/prevent them in our MR and MDR services
</li>
<li>
Provide research and subject matter expertise to S2 in support of advanced investigations and IR activities
</li>
<li>
Mentor team members
</li>
</ul>
Additionally, you will attend training, seminars or webinars that enhance your current knowledge base and skill set in order to improve job performance and efficiency. You will be expected to give external talks about your area of subject matter expertise at least once a year. 
We value a culture of sharing, so every team has the opportunity to share their work with the entire department during our monthly R&amp;D Demos. Once a year we hold a department-wide Hackathon, teaming up across all R&amp;D teams over four days to collaborate and build cool ideas outside the normal project scope. While innovation is the focus, some of these ideas do make it into our products.
About You
<ul>
<li>
Previous experience in advanced technical and analytical security roles -e.g. DFIR Analyst/Consultant, Security Engineer/Developer, or other equivalent/similar roles
</li>
<li>
Prior experience in detections engineering using Yara/Sigma/Snort/Suricata and other pattern matching languages/rule sets
</li>
<li>
Proficient in reverse engineering malware for Windows, Linux, and macOS
</li>
<li>
Strong understanding of the following security tooling and methods (must have):
<ul>
<li>
Open Source IPS/IDS/NSM/NDR (e.g. Bro/Zeek/Suricata)
</li>
<li>
Endpoint Security Monitoring/Event Analysis for Windows, Linux, and macOS (e.g. OSSEC, OSQuery, Sysmon, ETW, Windows Event Log, auditd, etc.)
</li>
<li>
Windows/Linux/macOS disk and memory forensics
</li>
<li>
Windows/Linux/macOS static and dynamic malware analysis with focus on highly evasive/complex threat agents
</li>
</ul>
</li>
<li>
Proficient in MITRE ATT&amp;CK framework and its application in the development of detection methods
</li>
<li>
Strong understanding of OS security hardening and controls for Windows (inclusive of Active Directory), Linux, and macOS
</li>
<li>
Foundational understanding of the following security tooling and methods:
<ul>
<li>
EDR tools for Windows, Linux, macOS (e.g. MS Defender ATP, SentinelOne, Carbon Black, CrowdStrike, etc.)
</li>
<li>
NGFW (PAN, CISCO, Fortinet, etc.)
</li>
<li>
SIEMs and Security Analytics platforms (e.g. Elastic, Open Source Big Data Stacks, Splunk, etc.)
</li>
</ul>
</li>
<li>
Ability to troubleshoot, educate, and share information with non-technical people
</li>
</ul>
In addition, you may have demonstrated leadership experience from previous projects, regardless of title held. Even if you haven’t worked with all of our specific technologies, you bring a diverse knowledge base that you use to help the team solve complex technical problems.

Interview Process
The interview process is approximately as follows:
<ul>
<li>
Phone pre-screening: A recruiter contacts you to briefly discuss your work history and provide an overview of Arctic Wolf. Approximately 30 minutes.
</li>
<li>
Technical assessment: A recruiter sends you a security research assessment to complete.
</li>
<li>
Face-to-face interviews: Several team members conduct interviews to learn more about you and provide more information about your potential role and team. Be prepared to collaborate on a technical problem and talk more about past projects and your career goals. Approximately 1 hour per interview.
</li>
</ul>
Security Requirements
<ul>
<li>
Conducts duties and responsibilities in accordance with AW’s Information Security policies, standards, processes, and controls to protect the confidentiality, integrity, and availability of AW business information assets.
</li>
<li>
Must pass a criminal background check and an employment verification as a condition of employment.
</li>
</ul>
Working at Arctic Wolf:
Arctic Wolf recognizes that success comes from delighting our customers, so we work together to ensure that happens every day. We believe in diversity and inclusion, and truly value the unique qualities and unique perspectives all employees bring to the organization. And we appreciate that—by protecting people’s and organizations’ sensitive data and aiming to end cyber risk— we get to work in an industry that is fundamental to the greater good.
All wolves receive compelling compensation and benefits packages, including:
<ul>
<li>Equity for all employees</li>
<li>Paid parental leave</li>
<li>Training and career development programs</li>
</ul>
If you're excited about this role, but do not meet all of the qualifications listed above, we still encourage you to apply. We review all applications and may yet consider you the right person for the role or have another open position where you’re the perfect fit.
Arctic Wolf is an Equal Opportunity Employer and considers applicants for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, genetics, or any other basis forbidden under federal, provincial, or local law.
Arctic Wolf is committed to fostering a welcoming, accessible, respectful, and inclusive environment that ensures equal access and participation for people with disabilities. Please let us know if you require any accommodations by emailing <a href="mailto:recruiting@arcticwolf.com" rel="noopener noreferrer nofollow ugc" target="_blank">recruiting@arcticwolf.com</a>.

Kitchener

Waterloo

Toronto

United States

Senior Security Researcher

Dragos, Inc.

Our Mission at Dragos is to protect the world’s most critical infrastructure from adversaries who wish to do it harm. We help defend industrial organizations that provide us with the tenets of modern civilization: running water, functioning electricity, and safe industrial working environments.Our Engineering Department is seeking a Principal Reverse Engineer to join its Protocols Team. This position works closely with partner teams to drive insights in industrial protocol analysis, network situational awareness, and threat behavioral analytics. 
<h3>Responsibilities</h3>
<ul>
<li>Analyze, reverse-engineer, and document industrial network protocols and functions related to system modification, command, and control, encryption/encoding, etc.</li><li>Coordinate and manage projects among team members, and across teams</li><li>Create excellent technical documentation</li><li>Generate innovative asset identification capabilities, protocol parsers, and threat behavior analytics for the Dragos Platform</li><li>Conduct in-depth reverse engineering of hardware and software to support designing and building detection logic</li><li>Work with customers and industry partners to collect and analyze host and network analytic opportunities in production environments</li><li>Improve the team’s tools and processes</li></ul>
<h3>Requirements</h3>
<ul>
<li>10+ years utilizing static and dynamic analysis tools to conduct in-depth reverse engineering of hardware and/or software without source</li><li>Prior experience reverse-engineering network protocols</li><li>Prior development/scripting experience (e.g., Python, Rust, Ruby, Go, Lua, etc.)</li><li>Proficiency in x86/x86_64 intel assembly and disassemblers including IDA Pro and Ghidra</li><li>Awareness of common operating system internals and the ability to identify analytic opportunities</li><li>Comfort working with multi-terabyte host and network datasets</li><li>Experience with blue and red team security tool plugin development (e.g., Zeek NSM modules, Wireshark dissectors, Metasploit modules, etc.)</li><li>Applied knowledge of communication fundamentals to include network and serial traffic</li></ul>
<h3>Compensation</h3>
<ul>
<li>Salary: $228,000</li><li>Salary + Benefits + Equity = $384,800</li><li>Comprehensive benefits plan (medical, dental, vision, disability, life insurance, 401K with match)</li><li>Equity at Dragos is quickly growing and the total compensation under-represents the future growth and refresh program. This will be discussed on the first call with the Dragos recruiter.</li></ul>Dragos is the Industrial Cybersecurity expert on a relentless mission to safeguard civilization. In a world of rising cybersecurity threats, Dragos protects the most critical infrastructure – those that provide us with the tenets of modern civilization – from increasingly capable adversaries who wish to do it harm. Devoted to codifying and sharing our in-depth industry knowledge of ICS/OT systems, Dragos arms industrial defenders around the world with the knowledge and tools to protect their systems as effectively and efficiently as possible. Founded by world-class industrial intelligence experts, Dragos has the industry’s largest team of ICS/OT practitioners who have been on the front lines of the world’s most significant industrial cyber-attacks. Diversity, Equity, and Inclusion are core values at Dragos, and we are passionate about building and sustaining an inclusive and equitable working environment for all. We know that every member of our team enriches our diversity by exposing us to a broad range of ways to understand and engage with the world, identify challenges, and discover, design, and deliver solutions. Not only does a Diversity, Equity, and Inclusion focus enrich our environment and teams, but it is also critical to our success as we defend against adversaries all over the world. The broad range of ideas, experiences, and perspectives is critical to our success. Dragos is an Equal Opportunity Employer and considers applicants for employment without regard to race, color, religion, sex, orientation, national origin, age, disability, genetics, or any other basis forbidden under federal, state, or local laws. All new hires must pass a background check as a condition of employment.#LI-JF1 #LI-REMOTE

Principal Reverse Engineer

Our Mission at Dragos is to protect the world’s most critical infrastructure from adversaries who wish to do it harm. We help defend industrial organizations that provide us with the tenets of modern civilization: running water, functioning electricity, and safe industrial working environments.Our Engineering Department is seeking a Senior Reverse Engineer to join its Protocols Team. This position works closely with partner teams to drive insights in industrial protocol analysis, network situational awareness, and threat behavioral analytics.
<h3>Responsibilities</h3>
<ul>
<li>Analyze, reverse-engineer, and document industrial network protocols and functions related to system modification, command, and control, encryption/encoding, etc.</li><li>Generate innovative asset identification capabilities, protocol parsers, and threat behavior analytics for the Dragos Platform</li><li>Conduct in-depth reverse engineering of hardware and software to support designing and building detection logic</li><li>Work with customers and industry partners to collect and analyze host and network analytic opportunities in a production environment</li></ul>
<h3>Requirements</h3>
<ul>
<li>4+ years utilizing static and dynamic analysis tools to conduct in-depth reverse engineering of hardware and/or software without source</li><li>Prior development/scripting experience (e.g., Python, Rust, Ruby, Go, Lua, etc.)</li><li>Proficiency in x86/x86_64 intel assembly and disassemblers including IDA Pro and Ghidra</li><li>Awareness of common operating system internals and the ability to identify analytic opportunities</li><li>Comfort working with multi-terabyte host and network datasets</li><li>Experience with blue and red team security tool plugin development (e.g., Zeek NSM modules, Wireshark dissectors, Metasploit modules, etc.)</li><li>Applied knowledge of communication fundamentals to include network and serial traffic</li></ul>
<h3>Compensation</h3>
<ul>
<li>Salary: $168,000</li><li>Salary + Benefits + Equity = $288,800</li><li>Comprehensive benefits plan (medical, dental, vision, disability, life insurance, 401K with match)</li><li>Equity at Dragos is quickly growing and the total compensation under-represents the future growth and refresh program. This will be discussed on the first call with the Dragos recruiter.</li></ul>Dragos is the Industrial Cybersecurity expert on a relentless mission to safeguard civilization. In a world of rising cybersecurity threats, Dragos protects the most critical infrastructure – those that provide us with the tenets of modern civilization – from increasingly capable adversaries who wish to do it harm. Devoted to codifying and sharing our in-depth industry knowledge of ICS/OT systems, Dragos arms industrial defenders around the world with the knowledge and tools to protect their systems as effectively and efficiently as possible. Founded by world-class industrial intelligence experts, Dragos has the industry’s largest team of ICS/OT practitioners who have been on the front lines of the world’s most significant industrial cyber-attacks. Diversity, Equity, and Inclusion are core values at Dragos, and we are passionate about building and sustaining an inclusive and equitable working environment for all. We know that every member of our team enriches our diversity by exposing us to a broad range of ways to understand and engage with the world, identify challenges, and discover, design, and deliver solutions. Not only does a Diversity, Equity, and Inclusion focus enrich our environment and teams, but it is also critical to our success as we defend against adversaries all over the world. The broad range of ideas, experiences, and perspectives is critical to our success. Dragos is an Equal Opportunity Employer and considers applicants for employment without regard to race, color, religion, sex, orientation, national origin, age, disability, genetics, or any other basis forbidden under federal, state, or local laws. All new hires must pass a background check as a condition of employment.#LI-JF1 #LI-REMOTE

Senior Reverse Engineer

Our Mission at Dragos is to protect the world’s most critical infrastructure from adversaries who wish to do it harm. We help defend industrial organizations that provide us with the tenets of modern civilization: running water, functioning electricity, and safe industrial working environments.Our Engineering Department is seeking a Staff Reverse Engineer to join its Protocols Team. This position works closely with partner teams to drive insights in industrial protocol analysis, network situational awareness, and threat behavioral analytics. 
<h3>Responsibilities</h3>
<ul>
<li>Analyze, reverse-engineer, and document industrial network protocols and functions related to system modification, command, and control, encryption/encoding, etc.</li><li>Generate innovative asset identification capabilities, protocol parsers, and threat behavior analytics for the Dragos Platform</li><li>Conduct in-depth reverse engineering of hardware and software to support designing and building detection logic</li><li>Work with customers and industry partners to collect and analyze host and network analytic opportunities in production environments</li></ul>
<h3>Requirements</h3>
<ul>
<li>5+ years utilizing static and dynamic analysis tools to conduct in-depth reverse engineering of hardware and/or software without source</li><li>Prior development/scripting experience (e.g., Python, Rust, Ruby, Go, Lua, etc.)</li><li>Proficiency in x86/x86_64 intel assembly and disassemblers including IDA Pro and Ghidra</li><li>Awareness of common operating system internals and the ability to identify analytic opportunities</li><li>Comfort working with multi-terabyte host and network datasets</li><li>Experience with blue and red team security tool plugin development (e.g., Zeek NSM modules, Wireshark dissectors, Metasploit modules, etc.)</li><li>Applied knowledge of communication fundamentals to include network and serial traffic</li></ul>
<h3>Compensation</h3>
<ul>
<li>Salary: $192,000</li><li>Salary + Benefits + Equity = $338,000</li><li>Comprehensive benefits plan (medical, dental, vision, disability, life insurance, 401K with match)</li><li>Equity at Dragos is quickly growing and the total compensation under-represents the future growth and refresh program. This will be discussed on the first call with the Dragos recruiter.</li></ul>Dragos is the Industrial Cybersecurity expert on a relentless mission to safeguard civilization. In a world of rising cybersecurity threats, Dragos protects the most critical infrastructure – those that provide us with the tenets of modern civilization – from increasingly capable adversaries who wish to do it harm. Devoted to codifying and sharing our in-depth industry knowledge of ICS/OT systems, Dragos arms industrial defenders around the world with the knowledge and tools to protect their systems as effectively and efficiently as possible. Founded by world-class industrial intelligence experts, Dragos has the industry’s largest team of ICS/OT practitioners who have been on the front lines of the world’s most significant industrial cyber-attacks. Diversity, Equity, and Inclusion are core values at Dragos, and we are passionate about building and sustaining an inclusive and equitable working environment for all. We know that every member of our team enriches our diversity by exposing us to a broad range of ways to understand and engage with the world, identify challenges, and discover, design, and deliver solutions. Not only does a Diversity, Equity, and Inclusion focus enrich our environment and teams, but it is also critical to our success as we defend against adversaries all over the world. The broad range of ideas, experiences, and perspectives is critical to our success. Dragos is an Equal Opportunity Employer and considers applicants for employment without regard to race, color, religion, sex, orientation, national origin, age, disability, genetics, or any other basis forbidden under federal, state, or local laws. All new hires must pass a background check as a condition of employment.#LI-JF1 #LI-REMOTE

Staff Reverse Engineer

Our Mission at Dragos is to protect the world’s most critical infrastructure from adversaries who wish to do it harm. We help defend industrial organizations that provide us with the tenets of modern civilization: running water, functioning electricity, and safe industrial working environments.Our Engineering Team is seeking a Senior Reverse Engineer to join its Research and Development organization. This position works closely with partner teams to drive insights in industrial protocol analysis, network situational awareness, and threat behavioral analytics. 
<h3>Responsibilities</h3>
<ul>
<li>Analyze, reverse-engineer, and document industrial network protocols and functions related to system modification, command, and control, encryption/encoding, etc.</li><li>Generate innovative asset identification capabilities, protocol parsers, and threat behavior analytics for the Dragos Platform</li><li>Conduct in-depth reverse engineering of hardware and software to support designing and building detection logic</li><li>Work with customers and industry partners to collect and analyze host and network analytic opportunities in production environments</li></ul>
<h3>Requirements</h3>
<ul>
<li>5+ years utilizing static and dynamic analysis tools to conduct in-depth reverse engineering of hardware and/or software without source</li><li>Prior development/scripting experience (e.g., Python, Rust, Ruby, Go, Lua, etc.)</li><li>Proficiency in x86/x86_64 intel assembly and disassemblers including IDA Pro and Ghidra</li><li>Awareness of common operating system internals and the ability to identify analytic opportunities</li><li>Comfort working with multi-terabyte host and network datasets</li><li>Experience with blue and red team security tool plugin development (e.g., Zeek NSM modules, Wireshark dissectors, Metasploit modules, etc.)</li><li>Applied knowledge of communication fundamentals to include network and serial traffic</li></ul>
<h3>Compensation</h3>
<ul>
<li>Salary: $192,000</li><li>Salary + Benefits + Equity = $338,000</li><li>Comprehensive benefits plan (medical, dental, vision, disability, life insurance, 401K with match)</li><li>Equity at Dragos is quickly growing and the total compensation under-represents the future growth and refresh program. This will be discussed on the first call with the Dragos recruiter.</li></ul>Dragos is the Industrial Cybersecurity expert on a relentless mission to safeguard civilization. In a world of rising cybersecurity threats, Dragos protects the most critical infrastructure – those that provide us with the tenets of modern civilization – from increasingly capable adversaries who wish to do it harm. Devoted to codifying and sharing our in-depth industry knowledge of ICS/OT systems, Dragos arms industrial defenders around the world with the knowledge and tools to protect their systems as effectively and efficiently as possible. Founded by world-class industrial intelligence experts, Dragos has the industry’s largest team of ICS/OT practitioners who have been on the front lines of the world’s most significant industrial cyber-attacks. Diversity, Equity, and Inclusion are core values at Dragos, and we are passionate about building and sustaining an inclusive and equitable working environment for all. We know that every member of our team enriches our diversity by exposing us to a broad range of ways to understand and engage with the world, identify challenges, and discover, design, and deliver solutions. Not only does a Diversity, Equity, and Inclusion focus enrich our environment and teams, but it is also critical to our success as we defend against adversaries all over the world. The broad range of ideas, experiences, and perspectives is critical to our success. Dragos is an Equal Opportunity Employer and considers applicants for employment without regard to race, color, religion, sex, orientation, national origin, age, disability, genetics, or any other basis forbidden under federal, state, or local laws. All new hires must pass a background check as a condition of employment.#LI-JF1 #LI-REMOTE

Reverse Engineer

Apply to NSM Cyber Security Jobs in companies remotely and near you. New NSM Cyber Security Jobs added daily.

Job Position and Company	Location	Tags	Posted
Senior Security Researcher at Arctic Wolf Networks	Remote Full Time Consultant Analyst Windows
Principal Reverse Engineer at Dragos, Inc.	Analytics Encryption Golang ICS Industrial
Senior Reverse Engineer at Dragos, Inc.	Analytics Encryption Golang ICS Industrial
Staff Reverse Engineer at Dragos, Inc.	Analytics Encryption Golang ICS Industrial
Reverse Engineer at Dragos, Inc.	Analytics Encryption Golang ICS Industrial

NSM Cyber Security Jobs

0 NSM Cyber Security Jobs. Page 1 of 1

5 closed nsm cyber security jobs:

Subscribe to the weekly
Cyber Security Jobs Newsletter

NSM Cyber Security Jobs

All Cyber Security Jobs

Cyber Security Jobs by Category

NSM Cyber Security Jobs

0 NSM Cyber Security Jobs. Page 1 of 1

5 closed nsm cyber security jobs:

Subscribe to the weekly Cyber Security Jobs Newsletter

NSM Cyber Security Jobs

All Cyber Security Jobs

Cyber Security Jobs by Category

Subscribe to the weekly
Cyber Security Jobs Newsletter