Developing hypothesis based on organization’s threat landscape
Perform proactive hunts with usage of technology like: EDR, MDR, Cloud Based Solutions (Azure, AWS, GCP) etc.
Understanding security posture gaps and addressing them
Stay up to date with the emerging threats and trending TTPs of Threat Actors
Being part of Blue Team ecosystem
cooperate with CERT (CSIRT, CTI), Red Team and SOC teams
Educating users about threats and incident causes
Perform forensic analysis of gathered artifacts to understand TTPs of attackers and provide detailed information about roots cause

Strong analytical skills and critical thinking
Very good understanding of EDR telemetry and/or Sysmon, log analysis from different set of security tooling
Very good knowledge of Windows and/or Linux/Unix
Very deep understanding of networking and common protocols
Being familiar with basic threat hunting and threat intelligence concepts
Fluent English
Good social skills
Familiarity with Kusto Query Language and/or Falcon Query Language (nice to have)
Knowledge about forensics tools and ability to investigate artifacts: filesystem forensics, memory forensics, network forensics (nice to have)
Proven experience in Incident Response, malware analysis (nice to have)
Scripting language (Python, PowerShell etc.) for automation and tools development (nice to have)

Senior Engineer

Key skills