Rubrik

Rubrik is seeking creative problem solvers with a passion for cyber security. In this role you will partner with all parts of the business to build security solutions that help secure the brand and protect the organization, company and customer environments. You will be responsible for executing security engineering programs and managing security technologies across the board. The ideal candidate for this role is someone who can build innovative ways to deliver frictionless security capabilities to enhance the security posture of the organization.
What you'll be doing:
<ul>
<li>Architect, deploy and manage security solutions and supporting infrastructure in cloud and datacenter environments in support of internal customer security needs</li>
<li>Manage a scalable and highly available solution for security logging and drive efforts of logging onboarding for increased security visibility</li>
<li>Automation where it makes sense</li>
<li>Assist with security incidents, investigations, root-cause analysis and drive down detection and containment times in partnership with the Security Operations team</li>
</ul>
Experience you'll need: 
<ul>
<li>Bachelor degree in Computer Science or related field or equivalent experience</li>
<li>3+ years experience in security engineering, building and managing security solutions across the stack (on-prem and cloud) </li>
<li>Strong understanding of logging and data management best practices and strong experience in any logging and/or SIEM platform such as Azure Sentinel, Devo, Splunk, logz.io, ELK and supporting technologies (syslog, Kafka, Spark, Pub/Sub, EventHubs, etc.)</li>
<li>Proficiency in any scripting language (Python, PowerShell, Perl, Ruby, shell, etc.)</li>
<li>Working experience in GCP or Azure</li>
</ul>
Preferred Qualifications:
<ul>
<li>Security certifications are a plus (CISSP, CISM, SANS certs, vendor certs, etc.)</li>
<li>Basic knowledge of container technologies (Docker, Kubernetes, etc), microservices and CI/CD pipelines</li>
</ul>
#LI-TG1About Rubrik:
Rubrik, the Zero Trust Data Security Company™, delivers data security and operational resilience for enterprises. Rubrik’s big idea is to provide data security and data protection on a single platform, including Zero Trust Data Protection, Ransomware Investigation, Incident Containment, Sensitive Data Discovery, and Orchestrated Application Recovery. This means your data is ready so you can recover the data you need, and avoid paying a ransom. Because when you secure your data, you secure your applications, and you secure your business.
We are <a href="https://www.rubrik.com/lp/analyst-reports/gartner-mq" rel="noopener noreferrer nofollow ugc" target="_blank">a leader in data security</a>, have been recognized as as a Forbes Cloud 100 Company, named as a LinkedIn Top 10 Startup and are proud to have earned Great Place to Work® Certification™. There has never been a more exciting time to join Rubrik, and our future is even brighter. The work you do will help propel our next chapter of growth as you do the best work of your career.
<a href="https://www.linkedin.com/company/rubrik-inc/mycompany/verification/" rel="noopener noreferrer nofollow ugc" target="_blank">Linkedin</a> | <a href="https://twitter.com/rubrikinc" rel="noopener noreferrer nofollow ugc" target="_blank">Twitter</a> | <a href="https://www.instagram.com/lifeatrubrik/" rel="noopener noreferrer nofollow ugc" target="_blank">Instagram</a> | <a href="https://www.rubrik.com" rel="noopener noreferrer nofollow ugc" target="_blank">Rubrik.com </a>| 
Diversity, Equity &amp; Inclusion @ Rubrik: 
At Rubrik we are committed to building and sustaining a culture where people of all backgrounds are valued, know they belong, and believe they can succeed here.
Rubrik's goal is to hire and promote the best person for the job, no matter their background. In doing so, Rubrik is committed to correcting systemic processes and cultural norms that have prevented equal representation. This means we review our current efforts with the intent to offer fair hiring, promotion, and compensation opportunities to people from historically underrepresented communities, and strive to create a company culture where all employees feel they can bring their authentic selves to work and be successful.
Our DEI strategy focuses on three core areas of our business and culture:
<ul>
<li>Our Company: Build a diverse company that provides equitable access to growth and success for all employees globally. </li>
<li>Our Culture: Create an inclusive environment where authenticity thrives and people of all backgrounds feel like they belong.</li>
<li>Our Communities: Expand our commitment to diversity, equity, &amp; inclusion within and beyond our company walls to invest in future generations of underrepresented talent and bring innovation to our clients.</li>
</ul>
<h5>Equal Opportunity Employer/Veterans/Disabled: Rubrik is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, or protected veteran status and will not be discriminated against on the basis of disability.</h5>
<h5>Rubrik provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, sex, national origin, age, disability or genetics. In addition to federal law requirements, Rubrik complies with applicable state and local laws governing nondiscrimination in employment in every location in which the company has facilities. This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation and training. </h5>
<h5>Federal law requires employers to provide reasonable accommodation to qualified individuals with disabilities. Please contact us at hr@rubrik.com if you require a reasonable accommodation to apply for a job or to perform your job. Examples of reasonable accommodation include making a change to the application process or work procedures, providing documents in an alternate format, using a sign language interpreter, or using specialized equipment.</h5>
<a href="https://www.dol.gov/sites/dolgov/files/ofccp/regs/compliance/posters/pdf/eeopost.pdf" rel="noopener noreferrer nofollow ugc" target="_blank">EEO IS THE LAW</a>
<a href="https://www.dol.gov/sites/dolgov/files/ofccp/regs/compliance/posters/pdf/OFCCP_EEO_Supplement_Final_JRF_QA_508c.pdf" rel="noopener noreferrer nofollow ugc" target="_blank">EEO IS THE LAW - POSTER SUPPLEMENT</a>
<a href="https://www.dol.gov/sites/dolgov/files/ofccp/pdf/pay-transp_English_unformattedESQA508c.pdf" rel="noopener noreferrer nofollow ugc" target="_blank">PAY TRANSPARENCY NONDISCRIMINATION PROVISION</a>
<a href="https://www.dol.gov/sites/dolgov/files/olms/regs/compliance/eo_posters/employeerightsposter2page_19final.pdf" rel="noopener noreferrer nofollow ugc" target="_blank">NOTIFICATION OF EMPLOYEE RIGHTS UNDER FEDERAL LABOR LAWS</a>

Palo Alto

Senior Information Security Engineer

Carta

<h3>The Company You’ll Join</h3>
At Carta we create owners and make private markets liquid. 
We live in a world where some people live on the equity stack and enjoy exponential wealth growth and preferential tax treatment; others live on the debt stack and may work their entire lives for a company and retire only with the cash they’ve managed to save from their paychecks. Our contribution to solving the wealth inequality problem is moving people from the debt stack (payroll) to the equity stack. By making it as easy to issue equity to employees as it is to put them on payroll, we can create more owners. 
At Carta, we are helpful, transparent, fair, and kind. We are relentless executors, unconventional thinkers, and masters of our craft. 
Learn more about our Series G fundraising round <a href="https://henrysward.medium.com/carta-series-g-3a3702f69b11" rel="noopener noreferrer nofollow ugc" target="_blank">here</a>. <h3>The Team You’ll Work With</h3>
This role is on the Security Operations team within the Security Engineering Organization. You will gather logs &amp; telemetry from many sources, identify risks, create automations to boost efficiency, as well as investigate and remediate threats. To complete this mission, we need people who are passionate about detection, response, automation, and monitoring - willing to go the extra mile to find the needle in the haystack.  We believe in creating teams not rockstars, progress not immediate perfection, and fostering a creative environment for research. We measure success not by how many bugs you find or tasks you complete, but by how much risk you reduce in the organization and how you work to improve the security of those around you. 
We get to work in an environment that uses infrastructure-as-code, Kubernetes, role-based access, and with engineers who care about the integrity and security of our data.
<h3>The Problems You’ll Solve</h3>
Some of the problems you’ll help us solve are: 
<ol>
<li>How do we enable automated security practices (vulnerability management, detection &amp; response, etc.) without interrupting business processes?</li>
<li>How do we maintain situational awareness across multiple cloud infrastructures, corporate environments, and data sensitivity levels, all in a growing environment?</li>
<li>How do we incorporate threat intelligence into proactive defense in an automated and reliable fashion?</li>
<li>How do we preserve a high level of customer privacy while also establishing an effective response posture?</li>
</ol>
<h3>The Impact You’ll Have</h3>
When things go bump in the night (or during the day!), you’ll be there to help guide the business to a safer path. You’ll help craft the next generation of Carta’s security operations programs, working with our team to help secure the future of our business. Your work will span across technologies, stacks, and languages, and you’ll help ensure a safe and secure workplace for all Cartans. 
<h3>About You</h3>
<ul>
<li>Demonstrate strong knowledge and experience with cloud-based services and infrastructure (Google Cloud, GSuite, AWS, Okta) and automation tools around these services (Terraform, GAM).</li>
<li>Strong understanding of attack models (such as MITRE’s ATT&amp;CK framework), and experience applying them in defense of enterprise environments.</li>
<li>Hands-on experience with effective incident response and containment practices</li>
<li>5-8 years of hands-on experience.</li>
<li>Demonstrate knowledge of security operations topics (detection &amp; response, identity and access, auditing and alerting, automation and orchestration, and threat hunting) and experience developing logic to automate those practices.</li>
<li>Experience working with engineering teams to ensure that all critical logs/signals are available for analysis.</li>
<li>Experience working with normalizing and correlating data across a wide variety of sources.</li>
<li>Able to build automation that accelerates response and reduces time to remediate for security incidents.</li>
<li>Identify gaps in security visibility and work with engineering teams to gather the necessary data.</li>
<li>Excellent writing skills, able to target your communications to the audience, whether technical or not.</li>
<li>Experience with the following:</li>
<ul>
<li>Administering and maintaining SIEM solution (SnowFlake, DataDog, Splunk, etc)</li>
<li>Developing security automation in python, or working with a SOAR platform.</li>
<li>Establishing, maintaining logging pipelines and parsing logs.</li>
<li>Creating monitoring alerts and detections.</li>
<li>Implementing endpoint state attestation tooling.</li>
</ul>
</ul>
**Role can be based in NYC, SF, Seattle, Santa Clara, or RemoteCovid Vaccine Policy
In an effort to safeguard the health of our employees, Carta has implemented a policy requiring all new hires to receive the COVID vaccine (including boosters as the individuals become eligible for them). Proof of vaccination will be required as a condition of employment. Carta will continue to comply with applicable laws regarding the reasonable accommodation of individuals with disabilities and/or strongly held religious beliefs. This policy is part of Carta’s ongoing efforts to ensure the safety and well-being of our staff and community, and to support public health efforts.
<h5>We are an equal opportunity employer and are committed to providing a positive interview experience for every candidate. If accommodations due to a disability or medical condition are needed, connect with us via email at <a href="mailto:recruiting@carta.com" rel="noopener noreferrer nofollow ugc" target="_blank">recruiting@carta.com</a>. As a company, we value fairness, helpfulness, transparency, leadership and build our teams around these values. Check out our <a href="https://carta.com/careers/" rel="noopener noreferrer nofollow ugc" target="_blank">careers page</a> to get to know us better as you think about your next step at Carta.</h5>

Seattle

San Francisco

Santa Clara

New York

United States

Senior Security Operations Engineer

XOR Security

<h3>Job Description:</h3>
XOR Security is currently seeking talented SOC Analyst for an exciting position supporting one of our premier clients. Our project is aimed at establishing cutting-edge techniques for network defense, identifying threats and detecting malicious activity using advanced toolsets. 
The ideal candidate will have hands-on experience as a SOC analyst performing Incident Response and Intrusion Detection on an operational Federal network.  The candidate will Monitor and analyze network traffic, Intrusion Detection Systems (IDS), security events and logs and provide a technical resource and escalation point for tier 1 analysts.  The candidate will perform incident response to investigate and resolve security incidents.  The candidate will need to be able to determine between false and true positives events, prioritizing them appropriately and see them through from end to end.  Additionally, the candidate will perform or review root cause analysis efforts following incident recovery.  The candidate will compose security alert notifications and other communications on behalf of the SOC.
In addition, the candidate will need to stay up to date with current vulnerabilities, attacks, and countermeasures.  The candidate will Develop follow-up action plans to resolve reportable issues and communicate with the other technologists to address security threats and incidents.  Also, the candidate will Regularly develop new use cases for automation and tuning of security tools.  The candidate will Define and create privacy and security reportable issues metrics and reports.  The candidate will need to contribute to security strategy and security posture by identifying security gaps, evaluate and implement enhancements.  The ideal candidate will possess a strong technical expertise of log and monitoring management systems, security event monitoring systems, network-based and host-based intrusion detection systems, firewall technologies, malware detection and enterprise-level antivirus solutions/systems, VPN technologies and encryptions standards
Location:
Washington D.C., USA
Schedule:
6am - 2pm or 10am - 6pm. Analyst should be flexible for both for potential rotation.
<h3>Skills and Qualifications:</h3>
<h4>Required Qualifications:</h4>
<ul>
<li>An industry technical certification such as GCIH</li>
<li>Experience with tools such as Active Directory, Cisco IOS, MS Server, ESA, WSA, Stealthwatch, AMP, Splunk, FortiSIEM, SNORT, Yara, IronPort, and Firepower.</li>
<li>Experience with deployment and documentation of enterprise project management and change management processes</li>
<li>Ability to identify solutions to potential network issues/embrace network simplification and strengthened security</li>
<li>Ability to conduct event triage and analysis and incident investigation</li>
<li>Three (3) years of experience in network defense environments</li>
</ul>
<h4>Desired Qualifications:</h4>
<ul>
<li>Understanding of command line scripting and implementation (e.g., Python, Powershell)</li>
<li>Ability to write new content/searches/scripts (e.g., Splunk dashboards, Splunk ES alerts, SNORT signatures, Python scripts, Powershell scripts)</li>
<li>Familiarity with Splunk Enterprise Security</li>
<li>Strong understanding of networking (TCP Flags, TCP Handshake, IP addressing, Firewalls, Proxy, IDS, IPS)</li>
<li>Ability to perform Netflow / packet capture (PCAP) analysis</li>
<li>Experience with cyber threat hunting</li>
<li>Bachelor’s Degree in Computer Science, Computer Engineering, Information Systems or equivalent experience</li>
</ul>
<h3>Closing Statement:</h3>
XOR Security offers a very competitive benefits package including health insurance coverage from the first day of employment, 401k with a vested company match, vacation and supplemental insurance benefits.
XOR Security is an Equal Opportunity Employer (EOE). M/F/D/V.
Citizenship Clearance RequirementApplicants selected may be subject to a government security investigation and must meet eligibility requirements - US CITIZENSHIP and PUBLIC TRUST CLEARANCE REQUIRED.

Washington

Mid Level SOC Analyst

ID.me

<h3>Company Overview</h3>
ID.me simplifies how people securely prove and share their identity online. The company empowers people to control their data through a portable and trusted login, which means they don’t need to create a new password when visiting sites that have the ID.me button.
The COVID-19 pandemic accelerated digital migration for many critical services. Those services require a trusted identity to safeguard against fraud and help ensure people are who they claim to be. With ID.me, login and identity credentials move with people, which can reduce the time and frustration of having to verify at multiple sites and set up multiple passwords.
ID.me is a credential service provider compliant with federal standards for digital identity verification. 
In addition to helping people control their credentials and data, the company’s “No Identity Left Behind” initiative strives to expand access and inclusion for all people. The company offers multiple pathways to verification – online self-serve, live video chat agents, and in person. ID.me is passionate about building a robust identity network that does not compromise access for traditionally underserved groups.<h3>Role Overview</h3>
ID.me is looking for a Senior Security Engineer to add to our rapidly growing security team. If you love innovation, here's your chance to make a career of it by advancing the digital identity ecosystem. We are seeking a talented Senior Security Engineer who enjoys the challenges of planning, implementing, and upgrading security measures and controls, to include: Cloud Security and Automation, Security Information and Event Management (SIEM) tools, Intrusion Detection and Prevention Systems (IDS/IPS), enterprise security, and other associated tools. 
The Senior Security Engineer will also have the opportunity to innovate by building tools to help create a highly integrated security environment, and see around corners. The team owns the end-to-end security of all systems and data for ID.me, and our Security Engineers are passionate about security and working in a fast-paced, ambiguous environment.
<h3>Responsibilities</h3>
<ul>
<li>Defend systems against unauthorized access, modification, and/or destruction</li>
<li>Contribute to security architecture and operations</li>
<li>Design, deploy and optimize security tools such as a SIEM, IDS/IPS, EDR, firewalls, etc</li>
<li>Troubleshoot systems to determine the root cause of issues impacting security infrastructure</li>
<li>Act as an escalation point for security analyst and a resource during incident response</li>
<li>Lead security integration and automation to improve detection, monitoring, and response</li>
<li>Collaborate with cross-functional groups such as DevOps, Software Engineering, etc</li>
<li>Build security orchestration and automation tools to improve preventative and detective controls</li>
</ul>
<h3>Ideal Qualifications</h3>
The qualifications below are ideal, but not all are required.  We encourage candidates to apply if they satisfy some, but not all of the qualifications.
<ul>
<li>7+ years of experience in information security</li>
<li>5+ years experience engineering, implementing, and optimizing security measures for the protection of systems, networks, and information</li>
<li>3+ years of experience supporting a Security Operations Center (SOC) or similar</li>
<li>Hands on experience with SIEM and centralized logging technologies (e.g. Splunk, Elastic, etc)</li>
<li>Experience with Security Orchestration, Automation, and Response (SOAR)</li>
<li>Strong capabilities leveraging scripting languages to automate work or build features (Bash, Python, and/or Ruby)</li>
<li>Experience securing cloud environments such as AWS, GCP, and/or Azure</li>
<li>Experience with configuration automation platforms (e.g. Chef, Ansible, Puppet, Salt, etc)</li>
<li>Bonus: Experience with Information Security Compliance, (SOC, FedRAMP, ISO, etc)</li>
<li>Bonus: Industry security certifications, such as GCIH/ECIH, Security+, or related</li>
</ul>
Ideal candidate will thrive in the following culture:
<ul>
<li>Must have an obsession for building quality products </li>
<li>Ability to thrive when there are changing priorities and shifting of gears</li>
<li>Strong oral and written communication skills</li>
<li>Must be a team player with a strong, self-managing work ethic</li>
<li>Must be a self-starter with a passion for security, learning and continuous improvement</li>
</ul>
Note that candidates must be located in the continental U.S.
ID.me Covid Vaccination Requirement
ID.me has a mandatory vaccination requirement where not prohibited by applicable federal or state law.
All current and future employees are required to receive their COVID-19 vaccinations, unless a reasonable accommodation is approved. Employees not in compliance with this policy will be placed on leave and will be terminated if no valid reason for not getting the COVID-19 vaccine is provided.  
Purpose: In accordance with ID.me's duty to provide and maintain a workplace that is free of known hazards, we are adopting this policy to safeguard the health of our employees and their families; our customers and visitors; and the community at large from COVID-19 that may be reduced by vaccinations. This policy will comply with all applicable laws and is based on guidance from the Centers for Disease Control and Prevention and local health authorities, as applicable.
Reasonable Accommodation: Current and future employees in need of an exemption from this policy due to a medical reason, or because of a sincerely held religious belief must submit a completed Request for Accommodation form to the human resources department to begin the interactive accommodation process as soon as possible after vaccination deadlines have been announced (September 13th) and an offer of employment has been made. Accommodations will be granted where they do not cause ID.me undue hardship or pose a direct threat to the health and safety of others.
Vision: To be the world's leading digital identity network empowering people to control their own information and to prove their credentials across all channels: online, call center, and in-person.
Mission: To make the world a more trusted place by delivering the highest level of security with the least amount of friction at the lowest possible cost.
People: We have an audacious mission. We aim to fix the identity layer of the internet. Billions of people will live better lives with more trust and convenience thanks to <a href="https://id.me/" rel="noopener noreferrer nofollow ugc" target="_blank">ID.me</a>. We are like Special Forces. We take on the most difficult challenges with amazing teammates. 
<a href="https://id.me/" rel="noopener noreferrer nofollow ugc" target="_blank">ID.me</a> Core Values: *Don't be a jerk. *Always compete. *Ask questions like a 5-year old. *Inspire people with your passion. *Make something better every day. *Treat each customer like your favorite family member. *Own your mistakes so you can learn from them. *Details are everything. *Communicate like a scientist. *Be truthful (even when it's hard). *Reflect <a href="https://id.me/" rel="noopener noreferrer nofollow ugc" target="_blank">ID.me</a>'s values in your actions. *Act like an owner.
ID.me Career Site &amp; Culture Deck: <a href="https://www.id.me/careers" rel="noopener noreferrer nofollow ugc" target="_blank">https://www.id.me/careers</a>
ID.me maintains a work environment free from discrimination, where employees are treated with dignity and respect. All ID.me employees share in the responsibility for fulfilling our commitment to equal employment opportunity. ID.me does not discriminate against any employee or applicant on the basis of age, ancestry, color, family or medical care leave, gender identity or expression, genetic information, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran status, race, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable laws, regulations and ordinances. ID.me adheres to these principles in all aspects of employment, including recruitment, hiring, training, compensation, promotion, benefits, social and recreational programs, and discipline. In addition, ID.me's policy is to provide reasonable accommodation to qualified employees who have protected disabilities to the extent required by applicable laws, regulations and ordinances where a particular employee works. Upon request we will provide you with more information about such accommodations.
 
Please review our Privacy Policy, including our CCPA policy, at <a href="http://id.me/privacy" rel="noopener noreferrer nofollow ugc" target="_blank">id.me/privacy</a>. If you provide ID.me with any personally identifiable information you confirm that you have read and agree to be bound by the terms and conditions set out in our Privacy Policy.
 
ID.me participates in E-Verify.
 

#LI-JS1
#LI-REMOTE

Senior Security Engineer (Remote)

Maveris

Maveris is an IT and cybersecurity services company committed to helping organizations create secure digital solutions to accelerate their mission. We are Veteran-owned and proud to serve customers across the Federal Government and private sector. We have an opening for a full-time, permanent Cyber Security Defense Analyst to join our talented, dynamic team in support of the Department of Veterans Affairs customer.Veterans are encouraged to apply. The Cyber Security Threat Hunter will be part of a team that creates hypothesis driven investigations to search out Advanced Persistent Threats and Focused Operators. The individual will need to possess the ability to work well both individually and as part of a team with a shared mission.Key Responsibilities:<ul> <li>Provide proactive Advanced Persistent Threat (APT) and Focused Operator (FO) hunting, incident response support, and advanced analytic capabilities</li> <li>Profile and track APT/FO actors that pose a threat in coordination with threat intelligence support teams</li> <li>Review and analyze log files from various sources such as SIEM, packet captures, and host logs to report any unusual or suspect activities</li> <li>Develop and execute custom scripts to identify host-based indicators of compromise</li> <li>Provide targeted attack detection and analysis, including the development of custom signatures and log queries and analytics for the identification of targeted attacks</li> <li>Determine scope of intrusion identifying the initial point of access or source</li> <li>Recommend remediation activities to secure the source or initial point of access of intrusion</li> <li>Communicate effectively to all customers and stakeholders</li> <li>Provide executive level cyber security strategic recommendations along with security engineering recommendations and custom solutions to counter adversarial activity</li> <li>Provide technical summary of findings in accordance with established reporting procedures</li> <li>Provide identification of obfuscation techniques</li> <li>Knowledge of and ability to apply cybersecurity and privacy principles to organizational requirements (relevant to confidentiality, integrity, availability, authentication, non-repudiation)</li> <li>Knowledge of and ability to apply techniques for detecting host and network-based intrusions using intrusion detection technologies</li> <li>Knowledge of and ability to utilize cyber defense and vulnerability assessment tools</li> <li>Knowledge of vulnerability information dissemination sources (e.g., alerts, advisories, errata, and bulletins)</li> <li>Knowledge of what constitutes a network attack and a network attack’s relationship to both threats and vulnerabilities</li> <li>Knowledge of Insider Threat investigations, reporting, investigative tools and laws/regulations</li> <li>Knowledge of adversarial tactics, techniques, and procedures</li> <li>Knowledge of the common attack vectors on the network layer</li> <li>Knowledge of different classes of attacks (e.g., passive, active, insider, close-in, distribution attacks)</li> <li>Knowledge of cyber attackers (e.g., script kiddies, insider threat, non-nation state sponsored, and nation sponsored)</li> <li>Knowledge of cyber attack stages (e.g., reconnaissance, scanning, enumeration, gaining access, escalation of privileges, maintaining access, network exploitation, covering tracks)</li> <li>Skilled in using security event correlation tools</li> <li>Knowledge of and ability to utilize malware analysis concepts and methodologies</li> </ul>Requirements<ul> <li>Experience with common threat hunting solutions including Splunk, packet analysis (e.g., Wireshark), Netflow, QRadar or other SIEMs, etc.</li> <li>An understanding of the MITRE ATT&amp;CK Framework and Cyber Kill Chain methodologies</li> <li>Experience with threat hunting advanced persistent threats</li> <li>In depth understanding of NIST SP 800-61, US CERT, and Office of Management and Budget (OMB) standards</li> <li>Scripting experience, such as Python, PowerShell, etc. is a plus</li> <li>Strong time management skills with attention to detail</li> <li>Strong critical thinking skills</li> <li>Strong interpersonal and collaborative skills, with the ability to work in a team environment</li> <li>Ability to communicate effectively to both technical and non-technical audiences</li> <li>Skilled in developing and deploying signatures</li> <li>Skilled in detecting host and network-based intrusions via intrusion detection technologies</li> <li>Skilled in determining how a security system should work (including its resilience and dependability capabilities) and how changes in conditions, operations, or the environment will affect these outcomes</li> <li>Skilled in collecting data from a variety of cyber defense resources</li> <li>Skilled in recognizing and categorizing types of vulnerabilities and associated attacks</li> <li>Skilled in reading and interpreting signatures (e.g., snort)</li> <li>Skilled in assessing security controls based on cybersecurity principles and tenets. (e.g., CIS CSC, NIST SP 800-53, Cybersecurity Framework, etc.)</li> <li>Skilled in performing packet-level analysis</li> <li>Able to develop content for cyber defense tools</li> <li>Characterize and analyze network traffic to identify anomalous activity and potential threats to network resources</li> <li>Coordinate with enterprise-wide cyber defense staff to validate network alerts</li> <li>Perform cyber defense trend analysis and reporting</li> <li>Perform event correlation using information gathered from a variety of sources within the enterprise to gain situational awareness and determine the effectiveness of an observed attack</li> <li>Receive and analyze network alerts from various sources within the enterprise and determine possible causes of such alerts.</li> <li>Ability to determine tactics, techniques, and procedures (TTPs) for intrusion sets</li> <li>Ability to conduct research, analysis, and correlation across a wide variety of all source data sets (indications and warnings)</li> <li>Ability to reconstruct a malicious attack or activity based off network traffic</li> <li>Assist in the construction of signatures which can be implemented on cyber defense network tools in response to new or observed threats within the network environment or enclave.</li> <li>Notify designated managers, cyber incident responders, and cybersecurity service provider team members of suspected cyber incidents and articulate the event's history, status, and potential impact for further action in accordance with the organization's cyber incident response plan.</li> <li>Analyze and report organizational security posture trends.</li> <li>Analyze and report system security posture trends</li> <li>Monitor external data sources (e.g., cyber defense vendor sites, Computer Emergency Response Teams, Security Focus) to maintain currency of cyber defense threat condition and determine which security issues may have an impact on the enterprise</li> <li>Provides cybersecurity recommendations to leadership based on significant threats and vulnerabilities</li> <li>Participation in rotational on-call support</li> </ul><h3>Relevant certifications and training preferred:</h3><ul> <li>GIAC Certified Incident Handler (GCIH)</li> <li>GIAC Certified Forensics Examiner (GCFE)</li> <li>GIAC Certified Intrusion Analyst (GCIA)</li> <li>GIAC Certified Forensic Analyst (GCFA)</li> <li>GIAC Certified Network Forensic Analyst (GNFA)</li> <li>GIAC Cyber Threat Intelligence (GCTI)</li> <li>GIAC Reverse Engineering Malware (GREM)</li> </ul>BenefitsMaveris attracts and retains talent of the highest caliber by offering opportunities to work in exciting and challenging environments surrounded by bright minds. Our employees are our most prized asset and are rewarded with highly competitive compensation and a top-tier benefits package, including:<ul> <li>401(k) with company match</li> <li>Dental Insurance</li> <li>Health Insurance</li> <li>Vision Insurance</li> <li>Life Insurance</li> <li>Paid Time Off</li> </ul><h3>About Maveris</h3>Maveris offers exceptional, mission-focused, solutions to organizations facing highly complex IT, digital, and cybersecurity challenges. Our success is achieved by maintaining an environment of trust where people are encouraged to reach their fullest potential. Every candidate that applies to Maveris brings something unique to the table, and because our team is diverse, we consistently meet our goals and exceed client expectations. If you are a highly-motivated person with a willingness to learn, we invite you to apply today to join our team!To learn more about employee benefits visit <a href="http://www.maveris.com/" rel="noopener noreferrer nofollow ugc" target="_blank">www.maveris.com</a>.For company updates and the latest job postings check us out on <a href="https://www.linkedin.com/company/maveris" rel="noopener noreferrer nofollow ugc" target="_blank">LinkedIn</a>.If you'd like to read about some of our research and projects head over to <a href="https://medium.com/maverislabs" rel="noopener noreferrer nofollow ugc" target="_blank">Maveris Labs</a>.Want a more behind the scenes view? Check out our blog <a href="https://maveris.com/insights/" rel="noopener noreferrer nofollow ugc" target="_blank">Maveris Insights</a> to learn more about the team behind the solutions.

Hines

Cyber Security Threat Hunter

Apply to Splunk Cyber Security Jobs in companies remotely and near you. New Splunk Cyber Security Jobs added daily.

Job Position and Company	Location	Tags	Posted
Senior Information Security Engineer at Rubrik	Full Time CISM Analyst Automation Azure
Senior Security Operations Engineer at Carta	Remote Full Time Incident Response Auditing Automation
Mid Level SOC Analyst at XOR Security	Full Time Soc Analyst Analyst Incident Response Active Directory
Senior Security Engineer (Remote) at ID.me	Remote Full Time Analyst Incident Response Ansible
Cyber Security Threat Hunter at Maveris	Full Time Forensic Analyst Incident Response GCFA

Splunk Cyber Security Jobs

0 Splunk Cyber Security Jobs. Page 1 of 1

5 closed splunk cyber security jobs:

Subscribe to the weekly
Cyber Security Jobs Newsletter

Splunk Cyber Security Jobs

All Cyber Security Jobs

Cyber Security Jobs by Category

Splunk Cyber Security Jobs

0 Splunk Cyber Security Jobs. Page 1 of 1

5 closed splunk cyber security jobs:

Subscribe to the weekly Cyber Security Jobs Newsletter

Splunk Cyber Security Jobs

All Cyber Security Jobs

Cyber Security Jobs by Category

Subscribe to the weekly
Cyber Security Jobs Newsletter