Cybersecurity Data/Detection/Implementation Engineer

Job Summary

We are seeking a skilled and experienced Cybersecurity Detection and Implementation Engineer with expertise in YARA rules creation, playbook implementation, and data ingestion techniques. This role presents an exciting opportunity to contribute to the design and implementation of cutting-edge cybersecurity solutions while collaborating with a talented team of professionals.

Responsibilities

• Design, develop, and maintain YARA rules for threat detection and malware analysis, ensuring high accuracy and effectiveness.
• Conduct research and analysis to identify emerging threats and vulnerabilities and develop proactive detection mechanisms.
• Identify and implement detection use cases based on emerging threats and TTPs using MITRE ATT&CK framework.
• Contribute to optimization of detection rules to eliminate false positives and improve detection efficiency.
• Collaborate with cross-functional teams to understand customer requirements and customize cybersecurity solutions to meet their needs.
• Participate in security incident response activities, providing technical expertise and support as needed.
• Stay abreast of the latest cybersecurity trends, technologies, and best practices, and share knowledge with the team.
• Work closely with customers to understand their security challenges and requirements and provide expert guidance and support.

Qualifications

• Bachelor’s degree in computer science, Information Security, or related field.
• 3 years of experience in cybersecurity, with a focus on detection engineering and implementation.
• Proficiency in creating and maintaining YARA rules for threat detection and malware analysis.
• Solid understanding of MITRE ATT&CK framework and developing detection rules based on it.
• Solid understanding of data ingestion techniques and technologies, including log management systems and data lakes.
• Knowledge and experience in developing use cases for Cloud, Identity, Endpoint and Data Exfiltration use cases.
• Hands-on experience with SIEM (Security Information and Event Management) solutions such as Splunk, ELK, or QRadar.
• Excellent analytical and problem-solving skills, with the ability to troubleshoot complex technical issues.
• Strong communication and interpersonal skills, with the ability to effectively collaborate with internal teams and customers.
• Relevant cybersecurity certifications (e.g., CISSP, CEH, GIAC) are a plus.

If you are a passionate and driven cybersecurity professional with expertise in writing detection rules and is enthusiastic about emerging threats and protecting customers, we want to hear from you. Join us in our mission to protect our organization and our customers from cyber threats.