Senior Cyber Security Engineer

Relativity

United States

United States

Ähnliche Jobs finden

Über

Senior Cyber Security Engineer In the role of Senior Cyber Security Engineer, you will be instrumental in safeguarding Relativity's network and infrastructure. This position involves investigating and analyzing emerging threats against our assets, identities, and clients. You will provide actionable remediation guidance to end users and collaborate with exceptional cyber experts to anticipate and counter evolving threats using state-of-the-art tools and capabilities. Key Responsibilities: Review, validate, and triage alerts, conducting technical analysis of log data from a diverse range of sensors, correlation logic, and threat intelligence sources. Assess the impact of security events by utilizing host, cloud, and network-based indicators, delivering actionable incident escalations. Develop and implement detection and prevention signatures with response strategies as part of a layered defense leveraging various technologies and data types. Create automation processes to swiftly search through collected telemetry for advanced threats that evade existing solutions. Establish Standard Operating Procedures, SOC playbooks, configuration guides, and security standards. Automate incident handling workflows to enhance efficiency. Engage in continuous research of emerging threats and apply suitable countermeasures in a dynamic environment. Serve as a subject matter expert in the mechanisms and analysis of detected malicious activities. Document and communicate findings clearly to both technical and executive stakeholders. Identify opportunities to reduce technical burdens through automation. Develop automation to deploy, operate, and integrate various cyber security tools and applications. Preferred Qualifications: 7+ years of experience in a Security Operations Center, Incident Response, or Threat Detection team for cloud applications and corporate networks. Proficiency in threat detection development and tuning. Experience in software design and development. Understanding of DevSecOps principles. Able to perform threat hunting, emulation, or purple teaming exercises. Familiarity with industry-standard security devices and their configurations. Experience in reverse engineering malicious code to understand infection and propagation techniques. Knowledgeable in threat intelligence tools and methodologies. Certifications: One or more of the following are preferred (GCFA, GCIA, GCIH, GNFA, GREM, OSCP, OSEP, OSED, OSWE, OSDA, OSCE3, CompTIA Security+, CCNA CyberOps, CEH). 5+ years of experience in a Security Operations Center, Incident Response, or Threat Detection team. Strong skills in cyber incident response methods (including Network forensics, memory forensics, and packet analysis). Proficient in reading, writing, and analyzing PowerShell, C#, and Python. Able to manage the prioritization of complex security events independently. Advanced understanding of typical SOC/CIRT operation processes and documentation. In-depth knowledge of TCP/IP, network services, cryptography, cloud security, and web application attacks. Ability to collaborate within a global cross-functional team to achieve overarching objectives and enhance Relativity's security posture. Comprehensive understanding of infection mechanisms, malicious behaviors, exploitation techniques, and mitigation controls. Good grasp of the tools, tactics, and procedures employed by attackers to infiltrate private systems and data. Strong analytical and problem-solving abilities. Skilled in leveraging programming and scripting languages to build automation and develop SOAR playbooks. Minimum Qualifications: 5+ years of experience in a Security Operations Center, Incident Response, or Threat Detection team. Strong cyber incident response skills (such as network forensics, memory forensics, and/or packet analysis). Able to read, write, and analyze PowerShell, C#, and Python. Effective in independently managing complex security events. Advanced understanding of common SOC/CIRT operational processes and documentation. In-depth knowledge of TCP/IP, network services, cryptography, cloud, and web application attacks. Able to work collaboratively within a global team to achieve high-level objectives that enhance Relativity's security posture. Strong understanding of infection mechanisms, malicious behavior, exploitation techniques, and mitigating tactics. Solid knowledge of the tools, tactics, and procedures utilized by attackers to breach systems and data. Exceptional analytical and problem-solving skills. Capable of utilizing programming and scripting languages to create automations and develop SOAR playbooks. Relativity is committed to fair and competitive compensation practices. This position offers total compensation, including a competitive base salary, an annual performance bonus, and long-term incentives. The expected salary range for this role is between $150,000 and $226,000. The final offered salary will be based on various factors, including the candidate's depth of experience, skill set, qualifications, and internal pay equity. Hiring at the top of the range would be atypical to allow for meaningful salary growth in this position.

United States

Sprachkenntnisse

English

Hinweis für Nutzer

Dieses Stellenangebot wurde von einem unserer Partner veröffentlicht. Sie können das Originalangebot einsehen hier.

Ähnliche Jobs finden