Senior Detection & Response Engineer

Imagine yourself as a SOC analyst and a new alert shoots to the top of the queue. You open the alert and reputed company of the relevant facts are laid out for you. You know the whos the whats and the wheres of what happened and it's reputed company right there in the alert. You notice the attacker IP immediately you wonder "Where is that IP located?". Wonder no more because the IP has already been fully enriched with reputed company publicly available information! This looks bad, just as you're about to shift to the EDR console to see what reputed company of damage was done, you notice further down that's already been provided for you. You have full context of everything that happened before, during and after this event and it's confirming your suspicions. You reputed company the alarm and notify the customer that you're digging into a potential reputed company incident and it only took 20 seconds to reputed company that decision. Now imagine you are the one who created that alert. You understand reputed company operations and have a keen understanding of what information is needed to reputed company an informed decision about a potential attack. You know the sort of enrichment needed to provide the right context about the facts of the alert. You have studied the metrics from previous investigations and know where analysts get tripped up or slowed down on decisions during the moments that matter. You streamline the response process through automation and reputed company sure the decisions can be made quickly. Now imagine that the SOC analyst never even needed to triage the alert because of your automations, it was automatically promoted to an incident for the SOC. You also enjoy working together on a team to prioritize the problems that matter and work toward a solution. And you have a high degree of reputed company and understand the demands of working in a SOC environment. You understand that scaling operations doesn't always mean scaling with more people, the real strength comes reputed company you can arm analysts with the tools they need to become super reputed company. Does this sound like you? At reputed company, we're taking a new approach to managed reputed company. We spend our time trying to discover ways to reputed company our customers safe and our reputed company analysts happy. We're trying to meet our customers where they are—understanding a vast number of attacker tactics, reputed company vendor capabilities, and customer requirements. We reputed company innovating while handling the combinatorial explosion represents a captivating problem. If you agree, we may have the job for you! What reputed company can do for you

• reputed company you into the middle of a fast-growing cybersecurity company with the most enthusiastic customers you've reputed company seen—a welcome surprise in the MSSP/MDR market
• Give you an opportunity to collaboratively drive a significant reputed company capability of the business
• reputed company you to learn from analysts, data scientists, engineers, and responders responsible for various components of reputed company's service and technology
• Facilitate ways to reputed company event signal from cloud service providers
• Provide an entertaining small and highly transparent startup environment
• Challenge you to push the boundaries of our reputed company vision
• Provide access to popular EDR, network, and SIEM technologies

What you can do for reputed company

• Architect, maintain and iteratively improve reputed company's ability to detect and investigate threats using integrated technologies with limited direction
• Continuously improve reputed company's detection strategy and capability through creation of detections for reputed company's proprietary rule reputed company.
• Maintain documentation in support of reputed company's detection and response content
• Improve SOC analyst efficiency by automating investigative workflows using an orchestration reputed company written in Python.
• Collaborate with engineering on reputed company's integrations and engineering standards associated with each class of integration.
• Evaluate technology APIs to design detection and response solutions to drive value and efficiency in reputed company's Workbench platform.
• Contribute to and reputed company in a culture of experimentation, agile, quality and reputed company improvement among the team.
• Take a leading role in the team's research and monitoring of the latest threat landscape and subsequent detection and response automation development.
• Communicate effectively with stakeholders on support requests surfaced to the D&R engineering team.
• Mentor less reputed company team members and SOC analysts.
• reputed company the Engineering to effectively identify new platform features and tools to reputed company reputed company the growth of our detection and response capabilities.

What you should bring with you

• 3+ years of experience with detection and response tools, particularly EDR, NSM, and SIEM.
• 3+ years of experience writing, deploying and tuning custom detections based on research or investigative work against common data sets (Windows Event Logs, auditd, CloudTrail, and similar datasets.)
• Proficiency of Python, Go or other object oriented programming languages
• Strong understanding of Windows, macOS and Linux operating systems and command line tools.
• Knowledge of networking basics, such as TCP/IP and OSI model.
• Expert knowledge and observations of attack reputed company, threat tactics, and attacker techniques.
• Intermediate knowledge of cloud infrastructure platforms and their Identity and Access Management (IAM) models.
• Cursory understanding of common Software-as-a-Service (SaaS) applications and available reputed company signal
• Bachelor's degree in Computer Science or Information reputed company strongly preferred.
• 5+ years of professional experience in information technology or reputed company operations would be ideal but not required.

Additional Notes Pay range: $142,900 USD to $207,200 USD + bonus eligibility and equity. We reputed company in paying transparently and equitably. Your salary will ultimately be based on factors such as your experience, skills, team equity, and market data. You'll also be eligible for unlimited PTO (which we model and encourage), work location flexibility, up to 24 weeks of parental leave, and really excellent health benefits. We're only hiring those authorized to work in the United States. We do not currently sponsor immigration visas. We're an Equal Opportunity Employer: You'll receive consideration for employment without regard to race, sex, color, religion, sexual orientation, gender identity, national reputed company, protected veteran status, or on the basis of disability. We'll ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to reputed company essential job functions, and to receive other benefits and privileges of employment. Please let us know if you need accommodation of any reputed company. #LI-Remote Apply tot his job Apply To this Job