Senior Threat Detection Engineer

🕒 vor 6 Tagen

🇺🇸 Vereinigte Staaten – Remote

💵 $152.000 / Jahr

⏰ Vollzeit

🟠 Senior

👷🏻‍♀️ Ingenieur

👻 Geisterscore 0%

Was es bedeutet: die Wahrscheinlichkeit, dass für diese Stelle niemand wirklich einstellt.So liest du es: 60 % oder höher heißt, wir halten das für einen Geisterjob. Niedrigere Werte sind weniger bedenklich.Warum dieser Wert:

• Seit 6 Tagen offen.
• Stellen bei diesem Unternehmen werden meist in 21 Tagen besetzt.

Jetzt Bewerben

Ähnliche Remote-Jobs finden

Dragos, Inc.

WebsiteLinkedInAlle Stellen

501 - 1000 Mitarbeiter

Gegründet 2016

🏭 Fertigung

📦 Logistik

💼 Beratung

💰 €74.000.000 Series D - Dragos im 2023-09

Manufacturing • Logistics • Consulting

Dragos, Inc. ist ein Cybersecurity-Unternehmen, das auf den Schutz von Operational Technology (OT) und Industrial Control Systems (ICS) in kritischen Infrastrukturen spezialisiert ist. Das Unternehmen bietet eine OT-native Plattform für Asset Visibility, Vulnerability Management, Threat Detection und Response Playbooks. Ergänzt wird das Angebot durch Threat Intelligence, Managed Services (einschließlich OT Watch und Incident Response), Schulungen und Unterstützung bei Compliance-Anforderungen. Dragos schützt Branchen wie Energieversorgung, Versorgungsunternehmen, Fertigung und Transport sowie weitere industrielle Umgebungen – mit einer Kombination aus Software, Intelligence und spezialisierten Services.

Beschreibung

• Create ICS-focused threat detections (atomic, component, composite, and events) and Asset Identification analytics based on assigned tickets • Mentor Detection Engineers by engaging them in the detection development process and delegating portions of detection development they are ready to own • Engage with Principal Detection Engineers to support detection development initiatives through analysis of packet captures and Windows host logs • Test, validate, and tune detections created by the Intel Detection team, including rules submitted by trusted advisors and industry partners, for analytic quality control • Lead the review, triage, and response for detection requests submitted to the Intel Detection Support board, enriching tickets with PCAPs, links, tags, and documentation • Drive documentation of processes for authoring, validating, and testing analytics released in Dragos Platform Knowledge Packs, and keep the knowledgebase current on reported issues, false positives, and detection questions • Analyze artifacts collected from ICS equipment, embedded devices, firewalls, network devices, and ICS software, and support staging and artifact collection within the Dragos ICS Cyber Range • Analyze cyber threat intelligence reporting to create detection ideation tasks for threat behavior-based detections and Asset Identification • Partner with Engineering, OT Watch, and Quality Engineering teams to identify protocol coverage gaps and resolve detection issues in the Dragos Platform • Give and receive peer feedback as part of the review cycle

🎯 Anforderungen

• 8+ years in security operations, threat hunting, or detection development, OR offensive operations, threat emulation, or security tool development • 2+ years of experience operationalizing cyber threat intelligence to defend networks from emerging threats • 1+ years of direct experience with SCADA, DCS, building automation, or other industrial control system devices and environments • Advanced network packet analysis and manipulation using tools such as Wireshark, Tshark, ngrep, tcpdump, Zeek, and Scapy • Working knowledge of Windows Event Logging fundamentals, including enabling and reviewing event logs, adjusting log size and retention settings, and enabling Advanced Audit Policies • Awareness of common operating system internals and the ability to identify analytic opportunities • Comfortable working with multi-gigabyte host and network datasets • Applied knowledge of network communication fundamentals • Proven ability to mentor and develop junior detection engineers • Adept at both verbal presentation and technical writing • Must pass a background check as a condition of employment

🏖️ Vorteile

• Competitive Equity Package • Comprehensive Benefits Plan

📊 Überprüfen Sie Ihre Lebenslauf-Bewertung für diese Stelle

Verbessern Sie Ihre Chancen auf ein Vorstellungsgespräch, indem Sie Ihre Lebenslauf-Bewertung vor der Bewerbung überprüfen.

Lebenslauf hochladen