XOR Security

XOR Security is currently seeking several Cyber Hunt SME to support an Agency-level SOC at DHS. The SOC program provides comprehensive Computer Network Defense and Response support through 24×7×365 monitoring and analysis of potential threat activity targeting the enterprise.  Senior SOC analysts will conduct security event monitoring, advanced analytics and response activities in support of the CND operational mission.  The positions will respectively focus on Cyber Hunt, Detective Content Development, Malware Analysis, and Cyber Threat Intelligence (skills in more than one cyber discipline are preferred).  To support this vital mission, XOR staff are on the forefront of providing Advanced CND Operations, and Systems Engineering support to include the development of advanced analytics and countermeasures to protect critical assets from hostile adversaries.
To ensure the integrity, security and resiliency of critical operations, we are seeking candidates with diverse backgrounds in cyber security systems operations, analysis and incident response. Strong written and verbal communications skills are a must. The ideal candidate will have a solid understanding of cyber threats and information security in the domains of TTP’s, Threat Actors, Campaigns, and Observables. Additionally the ideal candidate would be familiar with intrusion detection systems, intrusion analysis, security information event management platforms, endpoint threat detection tools, and security operations ticket management.
Candidate must have the required Qualifications:
<ul>
<li>For a Senior, at least 5 years of experience in a cyber network defense environment.</li>
<li>Active top Secret and/or DHS Agency Clearance.</li>
<li>Strong analytical and technical skills in computer network defense operations, ability to lead efforts in Incident Handling (Detection, Analysis, Triage), Hunting (anomalous pattern detection and content management) and Malware Analysis.</li>
<li>Prior experience and ability to with analyzing information technology security events to discern events that qualify as a legitimate security incidents as opposed to non-incidents. This includes security event triage, incident investigation, implementing countermeasures, and conducting incident response.</li>
<li>Previous hands-on experience with a Security Information and Event Monitoring (SIEM) platforms and log management systems that perform log collection, analysis, correlation, and alerting is required (preferably within Splunk or ArcSight).</li>
<li>Ability to develop rules, filters, views, signatures, countermeasures and operationally relevant applications and scripts to support analysis and detection efforts.</li>
<li>Strong logical/critical thinking abilities, especially analyzing security events (windows event logs, Tanium queries, network traffic, IDS events for malicious intent).</li>
<li>Strong proficiency Report writing – a technical writing sample and technical editing test will be required if the candidate has no prior published intelligence analysis reporting, excellent verbal and written communications skills and ability produce clear and thorough security incident reports and briefings.</li>
<li>Excellent organizational and attention to details in tracking activities within various Security Operation workflows.</li>
<li>A working knowledge of the various operating systems (e.g. Windows, OS X, Linux, etc.) commonly deployed in enterprise networks, a conceptual understanding of Windows Active Directory is also required, and a working knowledge of network communications and routing protocols (e.g. TCP, UDP, ICMP, BGP, MPLS, etc.) and common internet applications and standards (e.g. SMTP, DNS, DHCP, SQL, HTTP, HTTPS, etc.).</li>
<li>Experience with the identification and implementation of counter-measures or mitigating controls for deployment and implementation in the enterprise network environment.</li>
<li>Experience in mentoring and training junior and mid-level analysts. </li>
</ul>
Desired Qualifications:
<ul>
<li>Bachelor’s Degree in Information Technology, Cyber Security, Computer Science, Computer Engineering, or Electrical Engineering.</li>
<li>One or more certifications for CND Analysts:  GCIA, GCED, GCFE, GCTI, GNFA, GCIH, CND, ECSA, OSCP, OSEE, OSCE.</li>
<li>One or more certifications for malware or forensic analysts:  GCFA, GCFE, GREM, CHFI.</li>
<li>Existing Subject Matter Expertise of Advanced Persistent Threat or Emerging Threats.</li>
<li>Expertise on policies, industry trends, techniques related to penetration testing.</li>
<li>Proficiency in utilizing various packet capture (PCAP) applications/engines and in the analysis of PCAP data.</li>
<li>Experience with one or more of the following technologies Network Threat Hunting (Sqrrl), Big Data Analytics (Splunk), Endpoint Threat Detection (Tanium), SIEM (ArcSight), workflow and ticketing (HP Service Manager), Intrusion Detection System (IBM ISS).</li>
<li>Ability to work on-call during critical incidents or to support coverage requirements (including weekends and holidays when required).</li>
<li>Familiarity with scripting languages (BASH, Powershell, Python, PERL, RUBY etc.) or software development frameworks (.NET).</li>
</ul>
Closing Statement:
XOR Security offers a very competitive benefits package including health insurance coverage from the first day of employment, 401k with a vested company match, vacation and supplemental insurance benefits.
XOR Security is an Equal Opportunity Employer (EOE). M/F/D/V.
Citizenship Clearance Requirement
Applicants selected may be subject to a government security investigation and must meet eligibility requirements - US CITIZENSHIP and TOP SECRET CLEARANCE REQUIRED!

Springfield

Cyber Hunt SME

Maveris

Maveris is an IT and cybersecurity services company committed to helping organizations create secure digital solutions to accelerate their mission. We are Veteran-owned and proud to serve customers across the Federal Government and private sector. We have an opening for a full-time, permanent Systems Security Engineer to join a talented, dynamic team in support of a large Federal Government customer.Veterans are encouraged to apply.You will work with a team of security professionals to support a government customer performing an exciting real-world cyber mission. Hands-on, candidates should be comfortable with learning new technologies and highly motivated to develop and deploy cutting edge technologies. You must be security focused and driven to perform in a fast-paced environment.RequirementsEducation:<ul> <li>Bachelor’s Degree in one of the following areas: Computer Science, Computer Engineering, Software Engineering, Electrical Engineering, Computer and Information Security, Computer Security, and/or Network Administration from an accredited university/college. </li> <li>Will consider relevant work experience in lieu of a degree.</li> </ul>Security Clearance:<ul><li>Must have a minimum Top Secret with ability to obtain a TS/SCI</li></ul>Skills / Capabilities: <ul> <li>Must have recent work experience as a senior-level or technical lead in a related position on a major program, project, or activity.</li> <li>Must have a minimum of five (5) years recent experience in the direct performance of a major program, project, or activity relating to systems or network exploitation, Penetration Testing, Security Engineering, Exploit Development, or related fields.</li> </ul>Desired Experience:<ul> <li>Prior experience working as part of a security team is highly desirable. Relevant computer, networking and security certifications are also highly desirable. Ideal candidate would have significant experience working as a penetration tester or functioning in a Red Team or CNO/CNE environment.</li> <li>Strong exploitation background, including prior work in hardware engineering, construction, testing, or installation</li> <li>Relevant experience working with Windows, Linux, OSX, Android, and iOS, especially related to exploitation or systems security.</li> <li>Experience with cellular, Wi-Fi, Bluetooth or other wireless technologies</li> <li>Prior experience in networking, to include network engineering, network architectures, traffic analysis or troubleshooting</li> <li>Theoretical or working knowledge of security exploit techniques</li> <li>Development skills, including Java Script, Python, PHP, or C</li> <li>Security Certifications, such as OSCP, OSCE, OSWE, OSWP, OSEE, CISSP, GSEC, GCIA, GCIH, GWAPT, GPEN, GAWN, GXPN </li> </ul>BenefitsMaveris attracts and retains talent of the highest caliber by offering opportunities to work in exciting and challenging environments surrounded by bright minds. Our employees are our most prized asset and are rewarded with highly competitive compensation and a top-tier benefits package, including:<ul> <li>401(k) with company contribution</li> <li>Dental Insurance</li> <li>Health Insurance</li> <li>Vision Insurance</li> <li>Life Insurance</li> <li>Paid Time Off</li> </ul><h3>About Maveris</h3>Maveris offers exceptional, mission-focused solutions to organizations facing highly complex IT, digital, and cyber security challenges. Our success is achieved by maintaining an environment of trust where people are encouraged to reach their fullest potential. Every candidate that applies to Maveris brings something unique to the table, and because our team is diverse, we consistently meet our goals and exceed client expectations. If you are a highly-motivated person with a willingness to learn, we invite you to apply today to join our team!To learn more about employee benefits visit <a href="http://www.maveris.com/" rel="noopener noreferrer nofollow ugc" target="_blank">www.maveris.com</a>.For company updates and the latest job postings check us out on <a href="https://www.linkedin.com/company/maveris" rel="noopener noreferrer nofollow ugc" target="_blank">LinkedIn</a>.If you'd like to read about some of our research and projects head over to <a href="https://medium.com/maverislabs" rel="noopener noreferrer nofollow ugc" target="_blank">Maveris Labs</a>.Want a more behind the scenes view? Check out our blog <a href="https://maveris.com/insights/" rel="noopener noreferrer nofollow ugc" target="_blank">Maveris Insights</a> to learn more about the team behind the solutions.We are an equal opportunity employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity or expression, pregnancy, age, national origin, disability status, genetic information, protected veteran status, or any other characteristic protected by law.

Woodridge

Systems Security Engineer

Bishop Fox

Bishop Fox is the leading authority in offensive security, providing solutions ranging from continuous penetration testing, red teaming, and attack surface management to product, cloud, and application security assessments. We’ve worked with more than 25% of the Fortune 100, half of the Fortune 10, eight of the top 10 global technology companies, and all of the top global media companies to improve their security. Our Cosmos platform was named Best Emerging Technology in the 2021 SC Media Awards and our offerings are consistently ranked as “world class” in customer experience surveys. We're an active participant in the security community and have published more than 16 open source tools and 50 security advisories in the last five years. Learn more at bishopfox.com or follow us on Twitter.
Given our exceptional growth we are expanding and hiring an Attack Surface Intelligence Lead ­­­­­­­to join us on this exciting journey. 
<h3>Who You Are and What You’ll Do </h3>
Cosmos (formerly CAST) proactively defends dynamic attack surfaces by combining advanced technology, automation and expert-driven testing by a team of talented offensive security analysts, operators, and developers from a variety of diverse backgrounds.  We are looking for an Attack Surface Intelligence Lead who will be responsible for leading a team conducting attack surface discovery and reconnaissance activities leveraging Cosmos on named accounts with the goal of filling the funnel with intelligence and qualified leads.
In this role you will: 
<ul>
<li>Provide mentorship, coaching, and management of a team with diverse skills and expand the vision and mission for the Attack Surface Intelligence team.</li>
<li>Conduct attack surface discovery and reconnaissance activities on a continuous basis for named accounts.
<ul>
<li>Add new scope using various OSINT and network discovery tools.</li>
</ul>
</li>
<li>Develop meaningful insights into customer attack surface utilizing relevant data analytics tools and techniques.</li>
<li>Gather and analyze OSINT data relative to customer.</li>
<li>Identify and communicate anomalies in customer's attack surface and field technical questions.</li>
<li>Triage leads by validating scope, false positives and/or other initial playbook execution.</li>
<li>Maintain situational awareness of named account testing life-cycle activities and add insights where possible using intelligence gathering activities.</li>
<li>Maintain awareness of Cosmos platform performance, functionality, and data integrity.</li>
<li>Build and maintain customer intelligence knowledge base including aggregation of data gleaned via exploits, loot, and rules of engagement.</li>
<li>Strive to develop inside-out awareness of the customer’s environment.</li>
<li>Maintain up-to-date knowledge of threats, countermeasures, security tools, testing techniques, network and application security research, and Federal and industry regulations.</li>
<li>Engage in thought leadership activities by developing tools, conducting research, giving presentations, and authoring whitepapers and blogs.</li>
</ul>
<h3>Why Bishop Fox</h3>
Bishop Fox has always allowed its employees to work remotely, and this role could work anywhere in the United States (Or Mexico if the role is preferred there). Equity is offered to all employees and starts vesting on the first day.  You also have the opportunity to earn additional equity.  Our comprehensive benefits program is tailored to meet your needs at an affordable price. We embrace diversity and an inclusive culture.  We value our employees and who they are, which fosters a powerful and collective talent base to successfully serve our clients and the security community with unparalleled expertise. 
Your Education and Experience
You just have to be good at and, most importantly, love what you do. Don’t worry about a piece of paper; we won’t. Here’s a list of qualities we’re looking for:
<ul>
<li>Bachelor’s Degree in Software Engineering or related field preferred.</li>
<li>OSINT Certification (SANS OSINT or McAfee C|OSINT) desired.</li>
<li>High level offensive security certifications preferred, such as OSCP, OSWE, OSCE, OSEE, OSWP, GPEN, GWAPT and GXPN.</li>
<li>5+ years cybersecurity industry experience required.</li>
<li>Demonstrated commitment to continuous education.</li>
<li>Vulnerability management and analysis skills.</li>
<li>Sufficient scripting skills to automate small tasks.</li>
<li>Experience with conducting open-source and/ or academic research.</li>
<li>Understanding of how to leverage OSINT data and information to ensure whole client attack surface is understood.</li>
<li>Subject matter expert on multiple customers and their unique security needs.</li>
<li>Leadership abilities and mentorship skills that support the management and development of more junior members of the team.</li>
<li>Strong analytical skills with the ability to apply previously collected client information to support/enhance current testing activities.</li>
<li>Navigates unusual hours and last-minute requests with flexibility and calm.</li>
<li>Understanding of client needs and current business acquisitions.</li>
<li>Strong written and verbal communication skills.</li>
<li>Excellent problem-solving skills- tackles problems with a logical and systematic approach.</li>
<li>Excels at building professional trust and maintaining confidentiality.</li>
<li>Team player mentality with the ability to work as a self-motivated individual contributor.</li>
<li>Detail-oriented with the ability to prioritize and multi-task.</li>
<li>Excellent time management skills and focus.</li>
<li>Strong creative thinking skills.</li>
</ul>
Bishop Fox is an Equal Opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex including sexual orientation and gender identity, national origin, disability, protected veteran status, or any other characteristic protected by applicable federal, state, or local law.  All new hires must pass a background check as a condition of employment.
Interested? Apply today!

United States

Attack Surface Intelligence Lead

Coalfire

About CoalfireCoalfire is on a mission to make the world a safer place by solving our clients’ toughest cybersecurity challenges. We work at the cutting edge of technology to advise, assess, automate, and ultimately help companies navigate the ever-changing cybersecurity landscape. We are headquartered in Denver, Colorado with offices across the U.S. and U.K., and we support clients around the world.  But that’s not who we are – that’s just what we do. We are thought leaders, consultants, and cybersecurity experts, but above all else, we are a team of passionate problem-solvers who are hungry to learn, grow, and make a difference.   And we’re growing fast. We’re looking for a Senior Consultant - AWS to support our Pen Testing team.Position SummaryThe Consultant works closely with other Delivery team members on engagements, assessing the security and compliance of various types of client applications and supporting infrastructure against regulatory and industry requirements and standards, as well as security best practice frameworks.  The Consultant is a technically proficient individual contributor with broad and deep technical skills, meeting the objectives of their engagements, collaborating with clients, mentoring teammates, and providing subject matter expertise across one or more technical domains. The Consultant is a trusted advisor to clients, and through objective testing and results reporting, supports the client in making well-informed, risk-based decisions to improve overall security posture.    Consultants continue to deepen their skills and broaden their impact both internal to Coalfire, as well as the Security Community as a whole. As a member of the Threat and Vulnerability Management AWS Team, you will be responsible for architecture review, roles and access review, driving the methodology and execution of offensive penetration testing activities.
<h3>What You'll Do </h3>
<ul>
<li>As a member of the Application Security (AppSec) AWS Team, you will be responsible for architecture review, roles and access review, driving the methodology and execution of offensive penetration testing activities. These duties include:</li><li>Provide guidance to teammates and clients by advising on security and configuration best-practices, defense-in-depth, and secure SDLC. </li><li>Communicate with client stakeholders to include leadership, systems and network administrators, security engineers, development, and support teams.</li><li>Enhance and maintain cloud service provider technical testing methodologies and standards.</li><li>Lead and support penetration testing projects through their entirety, i.e. scoping through out-brief</li><li>Participate in internal and external security trainings and conferences</li></ul>
<h3>What You'll Bring</h3>
<ul>
<li>Proven track record of success managing client engagements.</li><li>Professional-level AWS certifications (SAP/DEP), or AWS Specialty certifications with supporting professional experience.</li><li>Minimum of 2 years of real-world experience with AWS application architectures including:</li><li>Deep, progressive experience with AWS security concepts, including IAM, STS, and AWS specific security controls and security architecture design patterns.</li><li>Experience with serverless design concepts and supporting services including S3, SQS, SNS, CloudFront, DynamoDB, Lambda and, API Gateway.</li><li>Knowledge of advanced/niche AWS services, including Cognito, IoT Core, or SageMaker are a major plus.</li><li>Familiarity with DevOps engineering concepts, infrastructure automation, pipelines, version control, and deployment strategies are also a plus.</li><li>Proficiency with a variety of programming languages JavaScript, Java, Python, Go etc. </li><li>An ability to validate that an environment meets security objectives through offensive security techniques, including:</li><li>Experience with web application and API penetration testing methods and tools</li><li>Experience with XSS, CSRF, IDOR, AuthN/AuthZ, and Confused Deputy attacks</li><li>Practical knowledge of cryptographic concepts</li><li>Organized and capable of providing formal documentation</li><li>Flourishes in cooperative work environments</li><li>Excellent communication and client-facing skills</li><li>Self-motivated and takes initiative to enhance or improve processes, procedures, and solutions.</li><li>Mentor teammates less familiar with AWS services and architectures</li></ul>
<h3>Bonus Points</h3>
<ul>
<li>AWS Certified Solutions Architect – Professional, AWS Certified Security, AWS Certified Advanced Networking, AWS Certified SysOps Administrator</li><li>AWAE, OSCP, OSCE, OSEE certifications</li><li>Network, Database, System administration experience and certifications</li></ul>Why You'll Want to Join UsAt Coalfire, you’ll find the support you need to thrive personally and professionally. In many cases, we provide a flexible work model that empowers you to choose when and where you’ll work most effectively –whether you’re at home or an office. Regardless of location, you’ll experience a company that prioritizes connection and wellbeing and be part of a team where people care about each other and our communities. You’ll have opportunities to join employee resource groups, participate in in-person and virtual events, and more. And you’ll enjoy competitive perks and benefits to support you and your family, like flexible time off, certification and training reimbursement, and comprehensive insurance options.  At Coalfire, equal opportunity and pay equity is integral to the way we do business. A reasonable estimate of the compensation range for this role is $125,000 to $160,000 based on national salary averages. The actual salary offer to the successful candidate will be based on job-related education, geographic location, training, licensure and certifications and other factors. You may also be eligible to participate in annual incentive, commission, and/or recognition programs #LI-TP1 #LI-Remote

Denver

Security Senior Consultant Penetration Testing, AWS Specialist | Remote US

Apply to OSEE Cyber Security Jobs in companies remotely and near you. New OSEE Cyber Security Jobs added daily.

Job Position and Company	Location	Tags	Posted
Cyber Hunt SME at XOR Security	Active Directory Analytics Arcsight BASH Big Data
Systems Security Engineer at Maveris	Android C Cissp Clearance Exploit
Attack Surface Intelligence Lead at Bishop Fox	Analytics Application Security Automation C Exploits
Security Senior Consultant Penetration Testing, AWS Specialist \| Remote US at Coalfire	Api Gateway Application Security Automation AWS Cloudfront
Cyber Hunt SME at XOR Security	Active Directory Analytics Arcsight BASH Big Data

OSEE Cyber Security Jobs

0 OSEE Cyber Security Jobs. Page 1 of 1

5 closed osee cyber security jobs:

Subscribe to the weekly
Cyber Security Jobs Newsletter

OSEE Cyber Security Jobs

All Cyber Security Jobs

Cyber Security Jobs by Category

OSEE Cyber Security Jobs

0 OSEE Cyber Security Jobs. Page 1 of 1

5 closed osee cyber security jobs:

Subscribe to the weekly Cyber Security Jobs Newsletter

OSEE Cyber Security Jobs

All Cyber Security Jobs

Cyber Security Jobs by Category

Subscribe to the weekly
Cyber Security Jobs Newsletter