Vectra

Vectra® is the leader in AI-driven threat detection and response for hybrid and multi-cloud enterprises.
The Vectra Platform captures packets and logs across network, public cloud, SaaS, and identity by applying patented security-led AI to surface and prioritize threats for rapid threat response. Vectra's threat detections are powered by a deep understanding of attacker methods and problem-optimized AI algorithms. Alerts uncover attacker methods in action and are correlated across customer environments to expose real attacks. Organizations around the world rely on Vectra to see and stop threats before a breach occurs. For more information, visit www.vectra.ai.Position Overview
As a key member of the Vectra pre-sales team, you will partner closely with your sales counterpart, prospects and Vectra customers throughout the region. You will be the subject matter expert regarding all pre-sales related activities for our prospects leading them all the way through to closing of the deal (and who doesn’t love closing a deal?!). And because we love our customers, you might step into some collaboration with the customer periodically after the deal is closed to further add value to the relationship with the customer.
Responsibilities
<ul>
<li>Pre-sales technical account management together with the Regional Sales Managers.</li>
<li>Lead customers and partners through demos and problem solving in clear, concise matter by being the subject matter expert on all things Vectra</li>
<li>Explore and maintain knowledge of Vectra's key competitors.</li>
<li>Communicate cross functionally constantly to ensure all key stakeholders are in the loop about product functionality and product desires experienced in the field.</li>
<li>Partner with the Product Management and R&amp;D departments to develop features critical to Vectra's success.</li>
<li>Develop and maintain an in-depth technical knowledge of the Vectra product line.</li>
<li>Identify new opportunities by creating and developing strong technical relationships with customers and channel partners.</li>
<li>Maintain knowledge at a high technical level of the current security landscape.</li>
<li>Collaborate with Customers on Technology reviews, product findings, and integration with other technologies they may have.</li>
<li>Collaborate with other Vectra Engineers on high-level projects to deliver Vectra technologies to our customers.</li>
<li>Participate in deployment review and forecast calls.</li>
<li>Participate in design review and release meetings.</li>
<li>Travel as needed within region.</li>
</ul>
Experience and soft skills
<ul>
<li>Startup DNA is a must: willing and able to do "whatever it takes" with motivation to find solutions rather than admire the challenge.</li>
<li>Customer-first behavior is a must.</li>
<li>extensive experience in technical or pre-sales as a Security Engineer (or Sales Engineer).</li>
<li>Large account management is required.</li>
<li>Excellent business fluency in German and English is required.</li>
</ul>
Technical qualifications
<ul>
<li>Deep understanding of security-focused product lines (CASB, EDR, SIEM or forensics-type platforms) with the ability to translate into security best practices.</li>
<li>Strong knowledge in networking and ability to understand L3 to L7 OSI layers.</li>
<li>String written (RFP) and verbal communications (Pre-sales presentations and conferences) are a must.</li>
<li>Good understanding of an attacker progression (Red Team or Pentest).</li>
<li>Good understanding of Incident Response (Blue Team) methodologies.</li>
<li>Good understanding of Cloud Security.</li>
<li>Good understanding of Security Processes and methodologies (CISSP/...) is a plus.</li>
</ul> A two-minute video that describes what we do at Vectra, and an article about Vectra's last funding round:<a href="https://vimeo.com/89579264" rel="noopener noreferrer nofollow ugc" target="_blank">https://vimeo.com/89579264</a><a href="https://tcrn.ch/3gVAXNw" rel="noopener noreferrer nofollow ugc" target="_blank">https://tcrn.ch/3gVAXNw</a>

Singapore

Security Engineer, Pre-Sales APJ

Robinhood

<h3>Join a leading fintech company that’s democratizing finance for all.</h3>
Robinhood was founded on a simple idea: that our financial markets should be accessible to all. With customers at the heart of our decisions, Robinhood is lowering barriers and providing greater access to financial information. Together, we are building products and services that help create a financial system everyone can participate in.

As we continue to build...
We’re seeking curious thinkers looking to co-author the next chapters of our story. Joining now means helping shape our vision, structures and systems; playing a key-role as we launch into our ambitious future.

Check out life at Robinhood on <a href="https://www.themuse.com/profiles/robinhood" rel="noopener noreferrer nofollow ugc" target="_blank">The Muse</a>!<h3>About the team: </h3>
The Detection and Response Team (DART) at Robinhood exemplifies our Safety First value by building and operating services that protect our customers' security and privacy. DART consists of detection platform and incident response teams who work together to assess threats, collect and analyze data, and respond to events. Together, we ensure the effectiveness of our safeguards and the continuous protection of our customers.
The DART team is looking for incident response engineers to monitor the full breadth of Robinhood's technology, detect threats, and respond to events in real-time.
<h3>What you’ll do day-to-day:</h3>
<ul>
<li>You will work in a 24/7 on-call rotation to monitor and respond to threats across production services and user endpoints.</li>
<li>You will partner with teams across Security &amp; Privacy and Engineering to address business and technical risks and to solve for inefficiencies in response workflows.</li>
<li>You will lead and participate in threat hunting exercises to test hypotheses and incorporate findings into improvements to our security controls.</li>
<li>You will design and implement strategies to continually improve the speed, efficacy, and safety of threat detection and containment.</li>
<li>You will look for opportunities to reduce manual effort through automation and implement process improvements.</li>
</ul>
<h3>About you:</h3>
<ul>
<li>3+ years' experience in security engineering.</li>
<li>2+ experience leading incident response, especially in financial or other regulated environments.</li>
<li>You have a bachelor's degree in Computer Science, Engineering or a related field, or equivalent training, fellowship, or work experience.</li>
<li>You have experience operating independently in a fast paced incident response, security operations, or similar environment.</li>
</ul>
<h3>Bonus points:</h3>
<ul>
<li>You have experience defining and implementing threat detection strategies.</li>
<li>You have used SIEM and SOAR or similar systems to detect threats and automate incident response.</li>
<li>You are innately curious and are skilled at finding hidden signals in large and complex datasets.</li>
<li>You are comfortable building tools and solutions using technologies like Python, Go, and AWS.</li>
</ul>
<h3>Technologies we use:</h3>
<ul>
<li>Software development languages and frameworks like Go, Python, and Django</li>
<li>Container orchestration and stream processing solutions like Kubernetes and Kafka</li>
<li>Amazon Web Services (AWS)</li>
<li>Proprietary and commercial solutions for security event detection and incident management</li>
</ul>
We’re looking for more growth-minded and collaborative people to be a part of our journey in democratizing finance for all. If you’re ready to give 100% in helping us achieve our mission—we’d love to have you apply even if you feel unsure about whether you meet every single requirement in this posting. At Robinhood, we're looking for people invigorated by our mission, values, and drive to change the world, not just those who simply check off all the boxes.
Robinhood promotes diversity and provides equal opportunity for all applicants and employees. We are dedicated to building a company that represents a variety of backgrounds, perspectives, and skills. We believe that the more inclusive we are, the better our work (and work environment) will be for everyone. Additionally, Robinhood provides reasonable accommodations for candidates on request and respects applicants' privacy rights. To review Robinhood's Privacy Policy please visit <a href="https://app.box.com/s/7xapqr14mbgy1p85toqusy1zrum9bv8e" rel="noopener noreferrer nofollow ugc" target="_blank">Robinhood - US Applicant Privacy Policy</a>.
Click <a href="https://app.box.com/s/43kz944zm0rolmhm8j3wjft50ktu6fr5" rel="noopener noreferrer nofollow ugc" target="_blank">here</a> to learn more about Robinhood’s Benefits. 
Robinhood is a primarily remote company. If hired, you will work as a remote employee unless the job you are applying for has a different working model specified. Please reach-out  to your recruiter if you have any questions regarding the job’s working model.

United States

Security Engineer, Incident Response

Netskope

About Netskope
Today, there's more data and users outside the enterprise than inside, causing the network perimeter as we know it to dissolve. We realized a new perimeter was needed, one that is built in the cloud and follows and protects data wherever it goes, so we started Netskope to redefine Cloud, Network and Data Security. 

Since 2012, we have built the market-leading cloud security company and an award-winning culture powered by hundreds of employees spread across offices in Santa Clara, St. Louis, Bangalore, London, Melbourne, and Tokyo. Our core values are openness, honesty, and transparency, and we purposely developed our open desk layouts and large meeting spaces to support and promote partnerships, collaboration, and teamwork. From catered lunches and office celebrations to employee recognition events (pre and hopefully post-Covid) and social professional groups such as the Awesome Women of Netskope (AWON), we strive to keep work fun, supportive and interactive. Visit us at <a href="https://www.netskope.com/company/careers" rel="noopener noreferrer nofollow ugc" target="_blank">Netskope Careers.</a> Please follow us on <a href="https://www.linkedin.com/company/netskope" rel="noopener noreferrer nofollow ugc" target="_blank">LinkedIn</a> and Twitter<a href="https://twitter.com/netskope" rel="noopener noreferrer nofollow ugc" target="_blank">@Netskope</a>.
<h3>What You’ll be responsible for in this role – Your contribution &amp; career journey</h3>
We are seeking a Security Operations Center (SOC) Analyst to join a 24x7x365 team of security professionals to monitor, detect, respond, and remediate threats facing our geographically-dispersed on-prem and cloud environments. 
<h3>Position Description</h3>
Serve as a point of contact for escalation of SOC functions. Frequent direct interface with the security teams to advise and coordinate operational activities to include notable threats, active incidents, and situation awareness. As well as coordinate/communicate with senior leadership on notable operational and programmatic issues.
The ideal SOC Analyst will possess a strong multi-disciplinary background. A strong technical aptitude across multiple IT arenas paired with outside-the-box thinking and the skillset to turn conceptual ideas into working solutions is imperative. There will be an extremely strong focus on incident/threat detection and response, Identity and Access Management, networking, and security. This individual will need to be self-motivated and possess a consultative mentality to work with various IT team members, Managers and other Organizational Units. This role reports directly to the SOC Manager in the CISO organization. Frequent managerial level interactions, discussions, and briefings will be expected.
The technical focus of this role is to evaluate multiple existing but independent toolsets and unite them into a single inter-related solutions platform. This role will lead in the interaction with both internal and external industry-elite incident response and security analytics &amp; engineering resources. Key project interactions will include SOC development, Security Operations, GRC, Threat and Vulnerability Management, Identity and Access Management Operations, and alpha/beta testing of emerging security solutions.
A general understanding of the totality of IT architectures and how they interrelate will be required. The successful candidate will be able to both evaluate technical solutions from the big picture perspective and actually drill down and configure the solutions independently.
<h3>Qualifications</h3>
Minimum Qualifications:
<ul>
<li>Minimum of 3 years in an enterprise-scale IT engineering or analyst role, with at least 1 years in a SOC </li>
<li>Act as incident commander during high severity incidents, if necessary.</li>
<li>Operate autonomously to further investigate and escalate in accordance with protocols SLAs.</li>
<li>Uphold and enforce established runbooks and processes. </li>
<li>Report SOC related metrics </li>
<li>Responsible for coaching/mentoring for all SOC team members</li>
<li>Identify SOC capability enhancement ideas for continuous improvement. Prioritize and assign resources to support enhancement projects and special requests.</li>
<li>Work with subject matter experts across the program to transform the maturity of the SOC to an industry-leading organization. </li>
<li>Demonstrate proficiency in incident response, kill chain oriented analytics, and identification of IoC’s.</li>
<li>Evaluate, tune, integrate, and optimize existing toolsets to meet monitoring and intelligence sharing requirements.</li>
<li>Understanding of Identity and Access Management technologies such as SSO/MFA/IGA and operations of those technologies</li>
<li>Work directly with Security Operations and Leadership to ensure that the final SOC solutions platform is designed to meet diverse operational goals and initiatives</li>
<li>Identify solution gaps and translate those gaps into vendor-agnostic technical requirements and/or capabilities</li>
<li>Working knowledge on Security technologies like Vulnerability Management, Identity and access management, Malware Detection, SIEM, DLP, SASE, CASB</li>
<li>Bachelor’s Degree in Computer Science, Information Security, Information Systems, or a related field, or equivalent.</li>
<li>Foundation in, and in-depth technical knowledge of, security engineering, computer and network security, authentication, security protocols, and applied cryptography.</li>
<li>Understanding of Cloud Security</li>
<li>Proficient understanding of regulatory and compliance mandates, including but not limited to GDPR, CCPA, Sarbanes-Oxley.</li>
<li>SOAR and other Automation knowledge (Python, bash scripting).</li>
<li>Experienced assessing and escalations to vendors for troubleshooting purposes.</li>
<li>Able to communicate and work with cross-functional teams.</li>
</ul>

Additional Required Qualifications
<ul>
<li>Detects, identifies and mitigates vulnerabilities in systems, including but not limited to databases, applications, network elements and devices, and data storage</li>
<li>Deploy security policies, investigate and evaluate alerts for malicious file execution attempts, and design enhanced protocols aligned with protecting corporate-wide production systems</li>
<li>Utilize various Vulnerability Management tools to scan enterprise for threats due to missed patches and newly identified vulnerabilities and work with various IT verticals to ensure all systems are hardened and patched.</li>
<li>Effectively communicates and influences at all levels of the organization</li>
<li>Lead root-cause analysis efforts to determine improvement opportunities when failures occur. Contribute as lead and SME on incident research and resolution when appropriate, mentoring incident team members.</li>
<li>Manage workload, prioritizing tasks and documenting time.</li>
<li>Provides training, and coaching for Analysts, Technicians, and Engineers in the IT Security</li>
<li>Provides identity management advice and support for network systems and applications. </li>
</ul>
Preferred Qualifications
<ul>
<li>One of the following: CISSP, CEH and or CompTIA Security +, SANS GIAC, CISSP, CRISC, or CISA are highly desired</li>
<li>3+ years of Security Operations and Engineering experience preferred, with</li>
<li>1+ years of work directly in a SOC environment</li>
</ul>




#LI-TS1Netskope respects your privacy and is committed to protecting the personal information you share with us, please refer to <a href="https://www.netskope.com/privacy-policy" rel="noopener noreferrer nofollow ugc" target="_blank">Netskope's Privacy Policy</a> for more details.

St. Louis

Security Operations Analyst

Huntress

Reports to: Director of ThreatOps Research &amp; Development
Location: Remote, US
Compensation Range: $120,000 to $180,000 base plus bonus and equity
What We Do:
Founded in 2015 by former NSA cyber operators, Huntress was built on a simple premise: to force hackers to earn every inch of their access.
Today’s cyber-attacks aren’t limited to large organizations with the security tools that can ward off threats. Hackers don't discriminate and will find a way to penetrate any vulnerability in any size business.  Huntress enables IT providers and resellers to stop hidden threats that sneak past preventive security tools.
Through a combination of expert human threat hunters, a comprehensive platform, and a desire to make the world a safer place, we’re working to deliver cybersecurity to the 99%—those small to midsize businesses that make up the backbone of our economy. 
Join the hunt and help us stop hackers in their tracks!
About the Role:
The Huntress ThreatOps team has the unique honor to wake up every morning knowing we’re going to make hackers regret targeting our partners and customers. As a ThreatOps macOS Researcher, we’re looking for someone who wants to pour all of their creativity into building and implementing simple solutions which are disproportionately effective at countering these constantly evolving threats. Competitive candidates have experience developing, experimenting, reverse engineering, and collaborating with diverse cybersecurity teams who are offense-minded and passionate about using under-leveraged OS functionality to prevent and detect new hacker tradecraft. Familiarity with product management, incident response, host-based threat hunting, malware analysis, configuration management and antivirus technologies are additional ways to differentiate yourself.
As you can imagine, success doesn’t happen in a vacuum. An effective researcher fosters highly collaborative environments between the Product, Marketing and Threat Operation Center teams to accelerate our mission and secure the 99% of businesses who fall below the enterprise poverty line. This collaboration is needed to produce and prioritize a unified technical vision which ultimately delivers our most impactful features and capabilities.
We defend over 1.3M endpoints across 33,000+ mid-sized and small business customers and that number continues to grow each month. Considering this market’s tighter budget, it’s not financially possible to dedicate human analysts to each client. The R&amp;D team addresses this challenge head-on by building and scaling highly automated efficiencies—often lightly augmented by our Threat Analysts—that make intruders earn every inch of their access while maintaining affordability and healthy gross margins.
Responsibilities: 
<ul>
<li>Identify relevant macOS specific artifacts as well as prototype ways to parse and present these artifacts</li>
<li>Lead research and development initiatives to further threat detection and endpoint security posture </li>
<li>Identity and prototype telemetry data that can be leveraged within Huntress to expand current prevention, hardening, and detection capabilities</li>
<li>Collaborate with our ThreatOps Analysts to identify threat patterns and develop automated solutions for analysis, classification, and categorization of data</li>
<li>Oversee the operational requirements of endpoint data collection, processing, and analysis</li>
<li>Perform analysis and reverse engineering of macOS malware to determine its characteristics and capabilities </li>
<li>Coordinate with Product and Engineering teams to integrate and operationalize solutions developed by the research team </li>
<li>Promote Huntress’ reputation through media interaction, public speaking, and blogs</li>
</ul>
What You Bring To The Team:  
<ul>
<li>Development experience across multiple platforms (e.g., Windows and/or macOS), C/C++, GoLang and Python preferred</li>
<li>Knowledge of macOS languages, such as Objective-C and Applescript a plus</li>
<li>In-depth knowledge of macOS subsystems and how they interact both at the user and kernel level preferred</li>
<li>In-depth knowledge of macOS forensic artifacts, their relevance, how they manifest, and how to parse them</li>
<li>Proficiency with IDA Pro, Binary Ninja, Ghidra, or equivalent disassembler a plus</li>
<li>Understanding of cyber security, threat actors, and end-to-end threat life cycle including one or more of the following: digital forensics, malware research, incident response, vulnerabilities and exploits</li>
</ul>
What We Offer: (please do not edit ‘what we offer’)
<ul>
<li>100% remote work environment - since our founding in 2015</li>
<li>Generous paid time off policy including vacation, sick time, and paid holidays</li>
<li>12 weeks paid parental leave</li>
<li>Highly competitive and comprehensive medical, dental, and vision benefits plans </li>
<li>401(k) with 5% contribution regardless of employee contribution</li>
<li>Life and Disability insurance plans</li>
<li>Stock options for all full-time employees </li>
<li>One-time $500 stipend to build/upgrade home office</li>
<li>Annual allowance for education and professional development assistance </li>
<li>$75 USD/month digital reimbursement</li>
</ul>
Huntress is committed to creating a culture of inclusivity where every single member of our team is valued, has a voice, and is empowered to show up to work every day as their full self. 
We do not discriminate based on race, ethnicity, color, ancestry, national origin, religion, sex, sexual orientation, gender identity, disability, veteran status, genetic information, marital status or any other legally protected status. 
We do discriminate against hackers who try to exploit small businesses.
Accommodations:
If you require reasonable accommodation in completing this application, interviewing, completing any pre-employment testing, or otherwise participating in the employee selection process, please direct your inquiries to <a href="mailto:accommodations@huntresslabs.com" rel="noopener noreferrer nofollow ugc" target="_blank">accommodations@huntresslabs.com</a>. Please note non-accommodation requests to this inbox will not receive a response. 
<h3>#BI-Remote </h3>

ThreatOps macOS Researcher

Qvest

Who We Are<a href="http://www.qvest.us" rel="noopener noreferrer nofollow ugc" target="_blank">Qvest.US</a> provides business and technology consulting services that bring our clients closer to their customers, data, and content. We have a global footprint across five continents and are the largest Media and Entertainment focused consulting company in the world. We have deep expertise across Program Management, Digital Media Supply Chain, IP &amp; Rights Management, Data &amp; Analytics, AI/ML, Customer Experience and Salesforce, Cybersecurity, &amp; IP Transformation.Who we're seekingYou are an organized and industrious leader who will motivate teams and help drive growth of Qvest's Cyber Security practice. You seek to join a team where you have the tools to accelerate your career, and leverage your expertise in Cyber Security to build relationships and drive growth.
<h3>What you'll do</h3>
<ul>
<li>Help lead project teams focused on Cyber Security through all core project phases, including project setup, requirements gathering, design, development, testing and deployment.</li><li>Perform tasks, create strategies, and execute plans that improve the security of client content, data, and customers.</li><li>Conduct initial reviews of deliverables and give feedback.</li><li>Proactively identify risks and issues, and provide mitigation strategies.</li><li>Lead various client meetings such as stakeholder interviews and client workshops.</li><li>Contribute to internal growth initiatives including mentorship, recruitment, strategy and/or methodology enhancement.</li></ul>
<h3>What you'll bring</h3>
<ul>
<li>3-7+ years System Implementation, SDLC, Integration, and Project Management experience</li><li>1-3 Years Experience in any Cyber Security Domains </li><li> - Identity &amp; Access Management</li><li> - Security, strategy and risk</li><li> - Cyber Defense</li><li> - Threat detection &amp; response</li><li> - Security Engineering</li><li> - Data classification &amp; privacy</li><li> - Application Security</li><li> - Security Orchestration &amp; Automation</li><li> - Endpoint protection</li><li> - Infrastructure Security</li><li>Experience in teams through client-facing activities such as requirements gathering, stakeholder workshops, and deliverable review/approval sessions</li><li>Experience in project planning, including building and managing to project plans, budgeting, resource allocation, and reporting status to clients and internal teams</li><li>Trained on process and/or technology methodologies (e.g. Lean Process Improvement, Six Sigma, Agile implementation, Waterfall model)</li><li>Bachelor's degree in engineering, information systems, computer science, business administration, or other related fields</li></ul>
<h3>Preferred Experience</h3>
<ul>
<li>CISSP and/or CISA Certified</li><li>GIAC Certified</li><li>Experience in Media &amp; Entertainment and/or Consumer Products industries</li><li>Experience at a large consulting firm (e.g., Accenture, Deloitte, EY, CapGemini, PWC)</li></ul>Life at QvestWe were founded on a culture of collaboration and inclusiveness, and this permeates each of our initiatives, both client-facing and internal. We offer a wide selection of benefits including medical, dental &amp; vision, 401k matching and flexible vacation; we sponsor training to advance our teams’ skill sets and we prioritize our employees’ professional growth paths. <a href="http://Qvest.US" rel="noopener noreferrer nofollow ugc" target="_blank">Qvest.US</a> is currently 350+ people strong and we’ve been recognized as a “Best Place to Work,” a “Great Place to Work,” “Fastest Growing,” and “A Jewel."Equal Employment OpportunityQvest is an Equal Opportunity Employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability status, protected veteran status, or any other characteristic protected by law. Qvest applies this stance to all employment actions, including but not limited to recruitment, hiring, upgrading, promotion, transfer, demotion, layoff, recall, termination, rates of pay or other forms of compensation and selection for training, including internships, at all levels of employment.

Los Angeles

Cyber Security Consultant

Apply to Threat Detection Cyber Security Jobs in companies remotely and near you. New Threat Detection Cyber Security Jobs added daily.

Job Position and Company	Location	Tags	Posted
Security Engineer, Pre-Sales APJ at Vectra	Full Time Red Team Blue Team Incident Response Cissp
Security Engineer, Incident Response at Robinhood	Remote Full Time Incident Response Automation AWS
Security Operations Analyst at Netskope	Full Time CISO Soc Analyst Comptia Analyst
ThreatOps macOS Researcher at Huntress	Remote Full Time Forensic Incident Response Windows
Cyber Security Consultant at Qvest	Full Time Consultant Internship Consulting Application Security

Threat Detection Cyber Security Jobs

0 Threat Detection Cyber Security Jobs. Page 1 of 1

5 closed threat detection cyber security jobs:

Subscribe to the weekly
Cyber Security Jobs Newsletter

Threat Detection Cyber Security Jobs

All Cyber Security Jobs

Cyber Security Jobs by Category

Threat Detection Cyber Security Jobs

0 Threat Detection Cyber Security Jobs. Page 1 of 1

5 closed threat detection cyber security jobs:

Subscribe to the weekly Cyber Security Jobs Newsletter

Threat Detection Cyber Security Jobs

All Cyber Security Jobs

Cyber Security Jobs by Category

Subscribe to the weekly
Cyber Security Jobs Newsletter