Senior Cyber Intelligence – Operation Engineer

Job not on LinkedIn

🔥 0 minutes ago

🇮🇳 India – Remote

⏰ Full Time

🟠 Senior

👷🏻‍♀️ Engineer

👻 Ghost score 15%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

SOCRadar Extended Threat Intelligence

WebsiteLinkedInAll Job Openings

51 - 200 employees

🔒 Cybersecurity

🔐 Security

🏢 Enterprise

💰 $5M Series A on 2023-03

Cybersecurity • Security • Enterprise

SOCRadar Extended Threat Intelligence is a cybersecurity company specializing in advanced threat intelligence and dark web monitoring. Their platform offers solutions like External Attack Surface Management, Brand Protection, and Supply Chain Intelligence, enabling businesses to counteract threats by gaining insights into hidden cyber dangers. SOCRadar provides extensive tools and services for threat hunting, real-time alerts, and asset discovery, helping organizations safeguard their digital assets from cyber threats. Their expertise in this domain includes dark web intelligence, phishing detection, data leak detection, and external attack surface visibility, serving over 20,000 companies worldwide. They aim to empower organizations with proactive and actionable cybersecurity intelligence, enhancing overall security operations.

📋 Description

• Audit and fine-tune customer digital footprints for comprehensive threat surface coverage • Configure and optimize alert rules, detection logic, and Digital Risk Protection settings • Design custom monitoring parameters based on customer risk profiles and industry requirements • Advise customers on security best practices and platform optimization • Ensure accurate, noise-free monitoring through configuration management • Develop technical onboarding documentation and configuration guides • Aggregate, correlate, and contextualize security alerts across multiple sources • Provide continuous managed threat monitoring and analysis • Conduct deep-dive investigations into complex threats, incidents, and adversary campaigns • Enrich digital footprints through reconnaissance and discovery • Deliver VIP analysis and targeted threat assessments • Generate adaptive threat intelligence reports • Track platform adoption, engagement, feature utilization, satisfaction, and alarm quality metrics • Identify churn risks and drive customer engagement through outreach, recommendations, and value demonstrations • Develop Python, PowerShell, Bash, and other scripts to automate security workflows • Create data parsing, transformation, enrichment tools, integrations, API wrappers, and connectors • Design AI-powered agents, machine learning models, chatbots, virtual analysts, and LLM-based security tools • Architect security operations automation workflows, SOAR playbooks, reporting, notification, escalation, self-healing, and adaptive response systems

🎯 Requirements

• Experience/qualifications for threat intelligence enablement, customer technical solutions, automation, custom tooling, and proactive intelligence services are required by the role description • Ability to audit and fine-tune customer digital footprints for comprehensive threat surface coverage • Ability to configure and optimize alert rules, detection logic, and DRP (Digital Risk Protection) settings • Ability to design monitoring parameters tailored to customer risk profiles and industry requirements • Experience providing continuous threat monitoring and analysis • Ability to investigate complex threats, incidents, and adversary campaigns • Experience with reconnaissance and discovery techniques for digital footprint enrichment • Ability to analyze platform adoption, user engagement, feature utilization, customer satisfaction, and alarm quality metrics • Programming/scripting skills in Python, PowerShell, Bash, and other languages • Ability to create data parsing, transformation, and enrichment tools for threat intelligence processing • Ability to build integrations between security platforms, SIEM systems, and third-party tools • Ability to design API wrappers and connectors • Experience designing and implementing AI-powered agents for automated threat analysis and triage • Knowledge of machine learning models for alert prioritization and anomaly detection • Ability to build LLM-based tools for natural language processing of security data and report generation • Experience architecting security operations automation processes • Knowledge of SOAR (Security Orchestration, Automation and Response) playbooks and integrations