Cybersecurity Engineer

Detection engineering and use-case development

• Detection engineering and use-case development.
• ETL, normalization, SQL, python notebooks, anomaly detection.

Emerging threat research and threat intelligence gathering

• Emerging threat research and threat intelligence gathering.

SOC tier 3 escalation support

• SOC tier 3 escalation support.

Security orchestration, automation, and response (SOAR)

• Security orchestration, automation, and response (SOAR).

Adversarial emulation and ethical hacking

• Adversarial emulation and ethical hacking.

Incident response and report writing

• Incident response and report writing.

Fun cutting-edge security projects

• Fun cutting-edge security projects.

What you bring to the role

• Strong foundation in security operations, which provides the context for advanced engineering projects within the Barracuda XDR SOC.
• At least 4-6 years of experience working for a SOC or CIRT is required.
• Comfortable and confident leading complex security investigations.
• Strong threat hunting abilities in SIEM solutions such as Elastic or Splunk.
• Basic hands-on experience with Kali Linux and other offensive security tools.
• Experience working with API-based integrations or SOAR applications.
• Basic familiarity with cloud services such as AWS and Azure and network technologies like the TCP/IP stack, firewall management, IDS/IPS, and log collection techniques.
• At least 2 years of experience with CICD, Python and SQL is required.
• Deep understanding of end-to-end detection engineering: research, development, automation, testing (Attack-and-Defend), and documentation.
• Familiarity with platforms such as Elastic and Databricks is preferred.

General Requirements

• Strong verbal and written communication skills.
• Willingness to work across time zones when required – we have team members in US East and Ireland also.
• Experience with publishing blogs, Github projects, and speaking engagements.
• A college degree in Computer Science, Data Science, Cybersecurity, or a related domain.
• Relevant security industry certifications such as CySA+, PNPT, or eJPT are preferred.

Pay

The anticipated salary range for this role is $105,000 to $140,000. Actual compensation offered will be dependent upon the individual's skills, experience, and qualifications as they directly relate to the requirements of the position, the budget for the position, and applicable employment laws.