Description
This is a 6 month contract to hire position
Read on to find out what you will need to succeed in this position, including skills, qualifications, and experience.
Security Certifications
– GNFA, GCFE, GPEN, and GREM
– OSCP and OSCE (REQUIRED)
**Candidates must have investment banking experience or finance exp**
Role
Do you have a knack for information security? Are you at your best when you need to analyze information security related incidents? We’re looking for someone like that to:
– Analyze malware samples to understands its behavior, assess threat actor motivations, and extract indicators of compromise (IOCs)
– Act upon threat intelligence provided by Cyber Threat Intelligence function
– Respond to Information Security related queries
– Perform cyber threat hunting for the detection of advanced threats
– Mentor and train junior analysts to enhance the overall technical skillset of the SOC, establish analytic discipline and critical thinking, and promote greater curiosity – thinking "outside the box"
– Expand, tune, and enhance rulesets – SIEM, IDS, etc. – to identify security incidents and reduce false positives
– Investigate IOCs provided by Cyber Threat Intelligence or the Cyber Hunter function
– Handling incidents – encompassing multiple functions: detection and identification, incident triage, network and host-based forensic analysis, root-cause analysis, containment, system hardening, etc.
Team
The security operations center is a global team. We are involved in different type of information security incidents (phishing, malware, denial of service, inappropriate usage and unauthorized access). xklufbp We are a young and empowered team who always drives for continuous improvement.
Your experience and skills
You have:
– A natural ability to solve complex issues through analytical and lateral thinking
– Performed proactive hunting; have detected anomalous and potentially malicious activity in log data
– Master's degree in a STEM field with 3+ years of relevant experience; Bachelor's degree in a STEM field with 5+ years of relevant experience; or 9+ years of incident response, malware analysis, and threat detection
– Hands-on experience with content development and use-case management
– Proficiency in log parsing and data analysis (REGEX is a must)
– Proficiency in x86 assembly language, disassemblers, and debuggers
– Hands-on experience with Volatility or similar malware analysis/forensic tools
– Proficiency in static and dynamic malware analysis
– Demonstrable proficiency in code de-obfuscation and anti-forensic techniques
– Fluency in at least one compiled language (C, C++, etc.) and one scripting language (Python, Perl, etc.)
– A firm understanding of the TCP/IP stack and networking (knowing the difference TCP and UDP is not enough)
– Moderate to advanced understanding of DDoS attacks and mitigation techniques
– Fluent in English