Senior Threat Detection Engineer

🕒 il y a 10 jours

Postuler Maintenant

Trouver des Emplois à Distance Similaires

Configurer une alerte email pour les nouveaux emplois

📊 Vérifiez votre score de CV pour ce poste

Améliorez vos chances d'obtenir un entretien en vérifiant votre score de CV avant de postuler.

Télécharger le CV

Blackbaud

Site WebLinkedInTous les Emplois

1001 - 5000 employés

☁️ SaaS

🤝 À but non lucratif

🤝 B2B

💰 €6 500 000 Series A en 2000-02

SaaS • Non-profit • B2B

Blackbaud est une entreprise de logiciels cloud qui développe des solutions intelligentes pour l'impact social, en se concentrant sur les organisations à but non lucratif. Elle fournit des produits et services pour la collecte de fonds, la gestion des donateurs, l'engagement, et des solutions cloud spécifiques au secteur pour aider les associations caritatives, les institutions éducatives, et d'autres organisations à mission à avancer plus rapidement et à travailler plus intelligemment. Blackbaud propose également des formations, du support, des ressources pour développeurs, une place de marché pour partenaires, et des recherches sectorielles via le Blackbaud Institute. L'entreprise met l'accent sur la confidentialité, la sécurité, et la responsabilité sociale d'entreprise.

Description

• Build out automations in order to optimize team performance and reduce response times • Document automation building process, to include defining pre-build requirements and validation criteria • Perform intrusion analysis using SIEM technology, reports, data visualization, log analysis and pattern analysis • First responder to security events and escalations via email, phone, and tickets across corporate user networks, data centers, and cloud environments. • Assist in remediation of information security incidents • Hunting for and identifying threat actor groups and respective tactics, techniques and procedures • Document and communicate findings, escalate critical incidents, and interact with lines of business • Improve and challenge existing processes and procedures in a very agile and fast paced cyber security environment • Keep current on the threat landscape and cyber security trends • Ability to adapt to fluid infrastructures and to learn/support new technologies • Thought leader around new security alert content creation, data correlation, anomaly thresholds, and logic updates • Primary mentor to the core analyst team with regards to training & escalation • Peer reviewer as a part of the core security engineering team • Advising/informing leadership on how to optimize current toolset and performing evaluation of future tools

🎯 Exigences

• 5+ years Security Engineering and Analysis experience, preferably in Threat Detection and Response • 5+ years of IT or networking experience • Intermediate to Advanced Linux/Unix OS and Windows knowledge • Expertise in at least one public cloud, preferably Microsoft Azure • Firewall rule and policy fundamentals • Network routing fundamentals • Ability to manage parallel tasks and accurately document resolutions • Working knowledge of network packet analysis tools • Proven ability to implement automation through scripting (e.g., Powershell, PERL, Python, bash scripting) • Experience with leveraging APIs to integrate third party tooling into an existing tool stack • Familiarity with cyber security frameworks such as NIST and MITRE ATT&CK • Industry recognized professional certification such as Security+, CBROPS, CSA, CEH, GSEC, SSCP

🏖️ Avantages

• Medical, dental, and vision insurance • Remote-flexible workforce • Wellness Programs • 401(k) program with employer match • Flexible paid time off • Generous Parental Leave • Donations for Doers • Pet insurance, legal and identity protection • Tuition reimbursement program