Rubrik

The Information Security organization advances the overall state of security at Rubrik through critical initiatives and coordination of large security projects. Information Security builds technologies, tools, and processes to better enable teams at Rubrik to develop secure software and protect data and systems with appropriate security controls. Information Security also develops systems to monitor and respond to attacks against our assets, provides awareness education to teams on security best practices for data protection, and ensures data governance and data sharing relationships with third parties in order to securely protect Rubrik information. 
Where can you make an impact?
Rubrik is seeking an Enterprise Security Engineer.  In this role, you will be responsible for ensuring that Rubrik's Corporate IT services are designed and implemented to the highest possible security standards.  You will partner with a variety of stakeholders across the business to achieve successful security outcomes in customer experience and productivity deliverables.
What you'll be doing:
<ul>
<li>Partner with all teams across Rubrik to create secure corporate infrastructure design and deployment architectures utilizing threat models and risk analysis documentation</li>
<li>Define organization policies for secure cloud design models within enterprise, hybrid, and public cloud environments including VMware, AWS, Azure and GCP</li>
<li>Work with development teams, operations, governance, and other stakeholders to draft security standards and implement monitoring, alerting, and governance</li>
<li>Design and implement standards across Identity (Okta), Endpoint (Windows, MacOS, Linux), Secrets Management (Vault, Lastpass) and Business Applications (Salesforce)</li>
<li>Support incident responders in analyzing applicable threats, vulnerabilities, controls and residual risks</li>
<li>Analyze and harden existing applications, infrastructure, automation, and deployment processes including CircleCI and Github</li>
<li>Coordinate with security researcher community for submitted vulnerabilities with issues and remediation of threats in both hybrid and public cloud environments</li>
</ul>
Experience you'll need:
<ul>
<li>Bachelor’s degree required; BS or MS in Computer Science, Information Technology, or a related field</li>
<li>6+ years experience in enterprise security, with hands on experience in administration and design across Windows, Mac, Okta and public cloud infrastructure</li>
<li>2+ years experience in VMWare and/or Network security modeling</li>
<li>Broad knowledge of enterprise attack vectors and exploits in both end-user and IT Apps</li>
<li>Subject matter expertise in business applications, endpoint and Identity management</li>
<li>Deep understanding of endpoint systems, corporate networking including wi-fi and IT application systems (Salesforce, Mulesoft, Lastpass, etc)</li>
<li>Programming experience in Python, Go or Java</li>
<li>Security expertise in at least one major public cloud provider (AWS, GCP, Azure) </li>
<li>Experience with deploying and securing Enterprise applications and environments at scale</li>
<li>Knowledge of regulatory guidelines and standards such as SOC2, ISO 27001, FedRAMP, etc.</li>
<li>Understanding of corporate security maturity model frameworks and how to apply them</li>
<li>Strong written and verbal communication skills</li>
</ul>About Rubrik:
Rubrik, the Zero Trust Data Security Company™, delivers data security and operational resilience for enterprises. Rubrik’s big idea is to provide data security and data protection on a single platform, including Zero Trust Data Protection, Ransomware Investigation, Incident Containment, Sensitive Data Discovery, and Orchestrated Application Recovery. This means your data is ready so you can recover the data you need, and avoid paying a ransom. Because when you secure your data, you secure your applications, and you secure your business.
We are <a href="https://www.rubrik.com/lp/analyst-reports/gartner-mq" rel="noopener noreferrer nofollow ugc" target="_blank">a leader in data security</a>, have been recognized as as a Forbes Cloud 100 Company, named as a LinkedIn Top 10 Startup and are proud to have earned Great Place to Work® Certification™. There has never been a more exciting time to join Rubrik, and our future is even brighter. The work you do will help propel our next chapter of growth as you do the best work of your career.
<a href="https://www.linkedin.com/company/rubrik-inc/mycompany/verification/" rel="noopener noreferrer nofollow ugc" target="_blank">Linkedin</a> | <a href="https://twitter.com/rubrikinc" rel="noopener noreferrer nofollow ugc" target="_blank">Twitter</a> | <a href="https://www.instagram.com/lifeatrubrik/" rel="noopener noreferrer nofollow ugc" target="_blank">Instagram</a> | <a href="https://www.rubrik.com" rel="noopener noreferrer nofollow ugc" target="_blank">Rubrik.com </a>| 
Diversity, Equity &amp; Inclusion @ Rubrik: 
At Rubrik we are committed to building and sustaining a culture where people of all backgrounds are valued, know they belong, and believe they can succeed here.
Rubrik's goal is to hire and promote the best person for the job, no matter their background. In doing so, Rubrik is committed to correcting systemic processes and cultural norms that have prevented equal representation. This means we review our current efforts with the intent to offer fair hiring, promotion, and compensation opportunities to people from historically underrepresented communities, and strive to create a company culture where all employees feel they can bring their authentic selves to work and be successful.
Our DEI strategy focuses on three core areas of our business and culture:
<ul>
<li>Our Company: Build a diverse company that provides equitable access to growth and success for all employees globally. </li>
<li>Our Culture: Create an inclusive environment where authenticity thrives and people of all backgrounds feel like they belong.</li>
<li>Our Communities: Expand our commitment to diversity, equity, &amp; inclusion within and beyond our company walls to invest in future generations of underrepresented talent and bring innovation to our clients.</li>
</ul>
<h5>Equal Opportunity Employer/Veterans/Disabled: Rubrik is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, or protected veteran status and will not be discriminated against on the basis of disability.</h5>
<h5>Rubrik provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, sex, national origin, age, disability or genetics. In addition to federal law requirements, Rubrik complies with applicable state and local laws governing nondiscrimination in employment in every location in which the company has facilities. This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation and training. </h5>
<h5>Federal law requires employers to provide reasonable accommodation to qualified individuals with disabilities. Please contact us at hr@rubrik.com if you require a reasonable accommodation to apply for a job or to perform your job. Examples of reasonable accommodation include making a change to the application process or work procedures, providing documents in an alternate format, using a sign language interpreter, or using specialized equipment.</h5>
<a href="https://www.dol.gov/sites/dolgov/files/ofccp/regs/compliance/posters/pdf/eeopost.pdf" rel="noopener noreferrer nofollow ugc" target="_blank">EEO IS THE LAW</a>
<a href="https://www.dol.gov/sites/dolgov/files/ofccp/regs/compliance/posters/pdf/OFCCP_EEO_Supplement_Final_JRF_QA_508c.pdf" rel="noopener noreferrer nofollow ugc" target="_blank">EEO IS THE LAW - POSTER SUPPLEMENT</a>
<a href="https://www.dol.gov/sites/dolgov/files/ofccp/pdf/pay-transp_English_unformattedESQA508c.pdf" rel="noopener noreferrer nofollow ugc" target="_blank">PAY TRANSPARENCY NONDISCRIMINATION PROVISION</a>
<a href="https://www.dol.gov/sites/dolgov/files/olms/regs/compliance/eo_posters/employeerightsposter2page_19final.pdf" rel="noopener noreferrer nofollow ugc" target="_blank">NOTIFICATION OF EMPLOYEE RIGHTS UNDER FEDERAL LABOR LAWS</a>

Palo Alto

Sr Enterprise Security Engineer II

Huntress

Reports to: Director of ThreatOps Research &amp; Development
Location: Remote, US
Compensation Range: $120,000 to $180,000 base plus bonus and equity
What We Do:
Founded in 2015 by former NSA cyber operators, Huntress was built on a simple premise: to force hackers to earn every inch of their access.
Today’s cyber-attacks aren’t limited to large organizations with the security tools that can ward off threats. Hackers don't discriminate and will find a way to penetrate any vulnerability in any size business.  Huntress enables IT providers and resellers to stop hidden threats that sneak past preventive security tools.
Through a combination of expert human threat hunters, a comprehensive platform, and a desire to make the world a safer place, we’re working to deliver cybersecurity to the 99%—those small to midsize businesses that make up the backbone of our economy. 
Join the hunt and help us stop hackers in their tracks!
About the Role:
The Huntress ThreatOps team has the unique honor to wake up every morning knowing we’re going to make hackers regret targeting our partners and customers. As a ThreatOps macOS Researcher, we’re looking for someone who wants to pour all of their creativity into building and implementing simple solutions which are disproportionately effective at countering these constantly evolving threats. Competitive candidates have experience developing, experimenting, reverse engineering, and collaborating with diverse cybersecurity teams who are offense-minded and passionate about using under-leveraged OS functionality to prevent and detect new hacker tradecraft. Familiarity with product management, incident response, host-based threat hunting, malware analysis, configuration management and antivirus technologies are additional ways to differentiate yourself.
As you can imagine, success doesn’t happen in a vacuum. An effective researcher fosters highly collaborative environments between the Product, Marketing and Threat Operation Center teams to accelerate our mission and secure the 99% of businesses who fall below the enterprise poverty line. This collaboration is needed to produce and prioritize a unified technical vision which ultimately delivers our most impactful features and capabilities.
We defend over 1.3M endpoints across 33,000+ mid-sized and small business customers and that number continues to grow each month. Considering this market’s tighter budget, it’s not financially possible to dedicate human analysts to each client. The R&amp;D team addresses this challenge head-on by building and scaling highly automated efficiencies—often lightly augmented by our Threat Analysts—that make intruders earn every inch of their access while maintaining affordability and healthy gross margins.
Responsibilities: 
<ul>
<li>Identify relevant macOS specific artifacts as well as prototype ways to parse and present these artifacts</li>
<li>Lead research and development initiatives to further threat detection and endpoint security posture </li>
<li>Identity and prototype telemetry data that can be leveraged within Huntress to expand current prevention, hardening, and detection capabilities</li>
<li>Collaborate with our ThreatOps Analysts to identify threat patterns and develop automated solutions for analysis, classification, and categorization of data</li>
<li>Oversee the operational requirements of endpoint data collection, processing, and analysis</li>
<li>Perform analysis and reverse engineering of macOS malware to determine its characteristics and capabilities </li>
<li>Coordinate with Product and Engineering teams to integrate and operationalize solutions developed by the research team </li>
<li>Promote Huntress’ reputation through media interaction, public speaking, and blogs</li>
</ul>
What You Bring To The Team:  
<ul>
<li>Development experience across multiple platforms (e.g., Windows and/or macOS), C/C++, GoLang and Python preferred</li>
<li>Knowledge of macOS languages, such as Objective-C and Applescript a plus</li>
<li>In-depth knowledge of macOS subsystems and how they interact both at the user and kernel level preferred</li>
<li>In-depth knowledge of macOS forensic artifacts, their relevance, how they manifest, and how to parse them</li>
<li>Proficiency with IDA Pro, Binary Ninja, Ghidra, or equivalent disassembler a plus</li>
<li>Understanding of cyber security, threat actors, and end-to-end threat life cycle including one or more of the following: digital forensics, malware research, incident response, vulnerabilities and exploits</li>
</ul>
What We Offer: (please do not edit ‘what we offer’)
<ul>
<li>100% remote work environment - since our founding in 2015</li>
<li>Generous paid time off policy including vacation, sick time, and paid holidays</li>
<li>12 weeks paid parental leave</li>
<li>Highly competitive and comprehensive medical, dental, and vision benefits plans </li>
<li>401(k) with 5% contribution regardless of employee contribution</li>
<li>Life and Disability insurance plans</li>
<li>Stock options for all full-time employees </li>
<li>One-time $500 stipend to build/upgrade home office</li>
<li>Annual allowance for education and professional development assistance </li>
<li>$75 USD/month digital reimbursement</li>
</ul>
Huntress is committed to creating a culture of inclusivity where every single member of our team is valued, has a voice, and is empowered to show up to work every day as their full self. 
We do not discriminate based on race, ethnicity, color, ancestry, national origin, religion, sex, sexual orientation, gender identity, disability, veteran status, genetic information, marital status or any other legally protected status. 
We do discriminate against hackers who try to exploit small businesses.
Accommodations:
If you require reasonable accommodation in completing this application, interviewing, completing any pre-employment testing, or otherwise participating in the employee selection process, please direct your inquiries to <a href="mailto:accommodations@huntresslabs.com" rel="noopener noreferrer nofollow ugc" target="_blank">accommodations@huntresslabs.com</a>. Please note non-accommodation requests to this inbox will not receive a response. 
<h3>#BI-Remote </h3>

United States

ThreatOps macOS Researcher

SugarCRM

About SugarCRMFrom the very beginning, SugarCRM had a unique vision: to offer a different kind of Customer Relationship Management (CRM). We pioneered the first commercial open-source CRM platform, and now, more than two decades later, are on a mission to provide products and services that make the hard things easier for sales, marketing and customer service teams. In fact, we help mid-market businesses around the globe reach new levels of performance and predictability by letting our award-winning CRM platform do the work.  Our diverse group of worldwide employees are united and driven by a shared passion for our mission, culture, and <a href="https://www.sugarcrm.com/careers/" rel="noopener noreferrer nofollow ugc" target="_blank">values</a>. We treat our employees like humans not line items and are building a culture where your work at Sugar helps fuel personal, professional and business growth – check out our recent ‘<a href="https://www.sugarcrm.com/press-releases/great-place-work-certification/" rel="noopener noreferrer nofollow ugc" target="_blank">Great Place to Work’ certification</a> that we are so proud of. Work/life fit and flexibility for our team matters and together we pride ourselves on solving for our customers, always. What’s more, we empower everyone to do their best work from home, the office, on the road, or anywhere in between.   If you're ready to grow your career and help organizations grow better and faster, you've come to the right place. Find out more about our <a href="https://www.sugarcrm.com/careers/" rel="noopener noreferrer nofollow ugc" target="_blank">SugarCRM careers </a>and how you can become a part of our journey. Thank you for taking a look at this amazing career opportunity! This is a direct employment position. If you feel you are a fit, please apply by uploading your CV in English. Thank you!The Information Security Engineer (engineer) is tasked with creating and certifying defense in depth for SugarCRM. The engineer will employ highly technical security skills to build and manage infrastructure security tools, respond to escalations, perform technical risk assessments, and ensure vulnerability remediation takes place. They will also act as a security subject matter expert (SME), providing advice for both corporate and product technical teams. The engineer will play a key part in defining technical strategy and aligning SugarCRM’s security program with industry standards, helping ensure our customers data is kept secure. The security engineer will have, but is not limited to, the following roles and responsibilities:
<h3>Impact you will make in the role:</h3>
<ul>
<li>Serve as a key technical resource for corporate and product security.</li><li>Select and deploy technologies to help protect SugarCRM customer data.</li><li>Review, build and tune SIEM rules.</li><li>Act as a liaison with 3rd party security vendors.</li><li>Review security escalations both internally, and from SugarCRM’s MSSPs.</li><li>Work on a range of cloud-based security technologies.</li><li>Create and lead an action plan to reduce risk.</li><li>Review and oversee remediation of vulnerability and penetration tests.</li><li>Educate staff on information security best practices.</li><li>Own encryption processes, key management and review.</li><li>Deploy controls to help maintain security compliance, such as SOC2, NIST and ISO27001.</li><li>Act as a technical point of contact for the compliance team.</li><li>Provide expertise in privacy and data protection aspects.</li><li>Research and collate threat intelligence and new attack trends.</li></ul>
<h3>What you will need to succeed:</h3>
<ul>
<li>BS degree in computing, information security, or a related field. MS is preferred.</li><li>10+ years of information security experience is also acceptable in lieu of a degree.</li><li>Industry certifications preferred – for example CISSP, CISA, CEH, OSCP, Security+</li><li>Strong experience with Microsoft Windows, MacOS and Linux operating systems.</li><li>Strong experience with AWS security &amp; configuration best practices and tools.</li><li>Strong experience in network security including next gen firewalls, IDS/IPS, VPN and WAF.</li><li>Strong experience using vulnerability management tools, for example Tenable, Qualys, Veracode.</li><li>Experience deploying security controls in a SOC2 environment.</li><li>Experience working with SIEM tools, for example LogRhythm, QRadar, Splunk.</li><li>Experience with script-based automation, including Kubernetes, Ansible, Python.</li><li>Experience with incident response, forensics and evidence preservation.</li><li>Experience working in a global, multi-time zone business.</li><li>Strong communications skills – an ability to communicate technical security requirements to business units, set strategy, and implement security initiatives.</li></ul>We understand that no candidate is perfectly qualified for any job. Experience comes in different forms; many skills are transferable; and passion goes a long way. Even more important than your resume is a clear demonstration of dedication, impact, and the ability to thrive in a fluid and collaborative environment. We want you to learn new things in this role, and we encourage you to apply if your experience is close to what we’re looking for. We also know that diversity of background and thought makes for better problem solving and more creative thinking, which is why we're dedicated to adding new perspectives to the team. Benefits and Perks:Beyond a stellar work environment, friendly people, and inspiring work, we have some sweet benefits and perks: - Private medical and vision benefit coverage- Health &amp;Wellness Reimbursement Program- Educational Resources - Career &amp; Personal Development Program- Attractive salary package- Flexible work hours- Meal tickets-Football Team-We are a merit-based company with many opportunities to learn, excel and grow your career!

Romania

Based

Information Security Engineer

Recorded Future, Inc.

With more than 800 employees, $200M ARR in 2021, 1,400+ clients, and rapid year-over-year growth, Recorded Future is the world’s largest intelligence company!This Role: We are looking for a threat researcher for Insikt Group’s Operational Outcomes team, to focus on technical analysis working alongside our highly skilled members and providing assistance in research into threats to cloud security from both cybercriminal and APT activities. This role supports client-driven finished intelligence reports on a multitude of technical topics including analysis of malicious tools, infrastructure profiling, and threat actor tools, tactics, and procedures (TTPs). Previous research experience is required.
What You’ll Do as a Senior Cloud Threat Intelligence Analyst: 
<ul>
<li>The primary function of this role is responding to client requests for written reports that require performing technical threat intelligence research and analysis in response to high-priority client issues</li>
<li>Develop log-based, network-based, and host-based detection rules such as Sigma rules, SNORT rules, and YARA rules to detect APT or cybercriminal campaigns in line with Insikt research goals and customer needs</li>
<li>Research and develop guidance around cloud security best practices and mitigations for operational cloud environments.</li>
<li>Support other threat intelligence analysts to analyze threats to cloud security from advanced threat actors to develop leads and insights into actor infrastructure, tooling, and targeting.</li>
<li>Perform network analysis of malicious infrastructure.</li>
<li>Stay on top of developments within the cloud security landscape and track key developments by following publications, blogs, and mailing lists.</li>
</ul>
What You’ll Bring to the Senior Cloud Threat Intelligence Analyst role (Required):
<ul>
<li>BA/BS degree or equivalent experience in Computer Science, Computer Engineering, Information Security, or a related field</li>
<li>3+ years of experience in Information Security and/or Threat Intelligence</li>
<li>Experience conducting technical threat analysis</li>
<li>Experience writing log, network and endpoint signature detections using Sigma, SNORT and YARA</li>
<li>Scripting experience in Python, Go, Powershell, or Bash </li>
<li>Experience operating services using one of the major cloud service providers (Google Cloud, AWS, or Azure)</li>
<li>Knowledge of TCP/IP and other networking protocols</li>
<li>Familiarity with analytic tradecraft, intelligence analysis and writing techniques and methodologies</li>
<li>Ability to convey complex technical and non-technical concepts in verbal products and excellent writing skills</li>
</ul>
Additional Skills/Experience (preferred but not required):
<ul>
<li>MA/MS degree or equivalent experience in Computer Science, Computer Engineering, Information Security, or a related field.</li>
<li>Experience operating services using multiple cloud service providers</li>
<li>Experience developing threat detections for cloud environments</li>
<li>Experience with Windows, iOS, Android, MacOS or malware analysis</li>
<li>Experience managing small projects and processes</li>
<li>Experience working and communicating directly with clients</li>
<li>Knowledge of open source intelligence gathering tools and techniques</li>
</ul>Why should you join Recorded Future?Recorded Future employees (or “Futurists”), represent over 35 nationalities and embody our core values of being passionate, practicing inclusion, and acting ethically. Our dedication to empowering clients with intelligence to disrupt adversaries has earned us a 4.7-star user rating from Gartner and 8 of the top 10 Fortune 100 companies as clients.
Want more info? <a href="https://www.recordedfuture.com/blog/" rel="noopener noreferrer nofollow ugc" target="_blank">Blog &amp; Podcast</a>: Learn everything you want to know (and maybe some things you’d rather not know) about the world of cyber threat intelligence<a href="https://www.instagram.com/recordedfuture/" rel="noopener noreferrer nofollow ugc" target="_blank">Instagram</a> &amp; <a href="https://twitter.com/RecordedFuture" rel="noopener noreferrer nofollow ugc" target="_blank">Twitter</a>: What’s happening at Recorded Future<a href="https://therecord.media/" rel="noopener noreferrer nofollow ugc" target="_blank">The Record</a>: The Record is a cybersecurity news publication that explores the untold stories in this rapidly changing field<a href="https://www.recordedfuture.com/about/#history" rel="noopener noreferrer nofollow ugc" target="_blank">Timeline</a>: History of Recorded Future<a href="https://www.recordedfuture.com/news/recognition/" rel="noopener noreferrer nofollow ugc" target="_blank">Recognition</a>: Check out our awards and announcements

We are committed to maintaining an environment that attracts and retains talent from a diverse range of experiences, backgrounds and lifestyles.  By ensuring all feel included and respected for being unique and bringing their whole selves to work, Recorded Future is made a better place every day.If you need any accommodation or special assistance to navigate our website or to complete your application, please send an e-mail with your request to our recruiting team at <a href="mailto:careers@recordedfuture.com" rel="noopener noreferrer nofollow ugc" target="_blank">careers@recordedfuture.com</a> 
Recorded Future is an equal opportunity and affirmative action employer and we encourage candidates from all backgrounds to apply. Recorded Future does not discriminate based on race, religion, color, national origin, gender including pregnancy, sexual orientation, gender identity, age, marital status, veteran status, disability or any other characteristic protected by law.Recorded Future will not discharge, discipline or in any other manner discriminate against any employee or applicant for employment because such employee or applicant has inquired about, discussed, or disclosed the compensation of the employee or applicant or another employee or applicant.

Boston

Washington

Senior Cloud Threat Intelligence Analyst

Arctic Wolf Networks

Ready to make an impact? Arctic Wolf seeks a Senior Security Researcher to join our pack.
Arctic Wolf, with its unicorn valuation, is the leader in security operations in an exciting and fast-growing industry—cybersecurity. How fast are we growing? Well, Arctic Wolf was highly ranked in the Deloitte Fast Technology 500 for North America in both 2019 (#25) and 2020 (#104)! We have doubled headcount, customers, and revenue for five years running.
We are also cultivating a collaborative and productive work environment that welcomes a diversity of backgrounds, cultures, and ideas to make our teams even stronger as we grow our teams globally. In fact, we were named a 2021 Top Workplace USA (Energage) as the top technology firm to work in our size category, were recognized as one of the 2020 Best Places to Work (bizjournals.com), and most recently were certified as a 2021 Great Place to Work (Great Places to Work Institute, Canada).
Arctic Wolf believes in corporate responsibility, and our worldwide offices proudly participate in volunteer programs throughout their communities. We’ve also earned distinction from TravelWise for our efforts in promoting sustainable transportation.
About the Team
Arctic Wolf Labs is the research-focused division at Arctic Wolf focused on advancing innovation in the field of security operations. The mission of Arctic Wolf Labs is to develop cutting-edge technology and tools that are designed to enhance the company’s core mission to end cyber risk, while also bringing comprehensive security intelligence to Arctic Wolf’s customer base and the security community-at-large. Leveraging the more than two trillion security events the Arctic Wolf Security Operations Cloud ingests, parses, enriches, and analyzes each week, Arctic Wolf Labs is responsible for performing threat research on new and emerging adversaries, developing advanced threat detection models, and driving improvement in the speed, scale, and detection abilities of Arctic Wolf’s solution offerings. The Arctic Wolf Labs team comprises security and threat intelligence researchers, data scientists, and security development engineers with deep domain knowledge in artificial intelligence (AI), security R&amp;D, as well as advanced threat offensive and defensive methods and technologies.
About the Role
A Senior Security Researcher is a senior security subject matter expert in the areas of threat/malware analysis, vulnerability research, reverse engineering and advanced threat prevention/detection/analysis technologies and methods. You will work closely with stakeholders in our product management, Security Services, Threat Intelligence Research, Security Analytics, Managed Detection &amp; Response (MDR), and Managed Risk (MR) teams to support our product development mandates including the development of advanced detections and vulnerability analysis for the endpoint, network and cloud domains. You will be involved in the development of our predictive threat defence systems/frameworks and will also participate in continually evaluating our security platforms against the latest threats and adversarial methods to identify gaps and research/prototype new solutions to address them.
Responsibilities Include:
<ul>
<li>
Analyze technical threats and data to research: TTPs, new ransomware/malware techniques, use of non-malicious tooling for attacks (e.g. LOL bins, penetration testing tools, etc.), and other adversarial methods.
</li>
<li>
Develop and maintain threat/malware analysis tooling/methods
</li>
<li>
Reverse engineering and analyzing novel threats/malware including evasions and the bypassing of protections
</li>
<li>
Research and analyze emerging vulnerabilities and their possible exploitations with a focus on how to detect/prevent them in our MR and MDR services
</li>
<li>
Provide research and subject matter expertise to S2 in support of advanced investigations and IR activities
</li>
<li>
Mentor team members
</li>
</ul>
Additionally, you will attend training, seminars or webinars that enhance your current knowledge base and skill set in order to improve job performance and efficiency. You will be expected to give external talks about your area of subject matter expertise at least once a year. 
We value a culture of sharing, so every team has the opportunity to share their work with the entire department during our monthly R&amp;D Demos. Once a year we hold a department-wide Hackathon, teaming up across all R&amp;D teams over four days to collaborate and build cool ideas outside the normal project scope. While innovation is the focus, some of these ideas do make it into our products.
About You
<ul>
<li>
Previous experience in advanced technical and analytical security roles -e.g. DFIR Analyst/Consultant, Security Engineer/Developer, or other equivalent/similar roles
</li>
<li>
Prior experience in detections engineering using Yara/Sigma/Snort/Suricata and other pattern matching languages/rule sets
</li>
<li>
Proficient in reverse engineering malware for Windows, Linux, and macOS
</li>
<li>
Strong understanding of the following security tooling and methods (must have):
<ul>
<li>
Open Source IPS/IDS/NSM/NDR (e.g. Bro/Zeek/Suricata)
</li>
<li>
Endpoint Security Monitoring/Event Analysis for Windows, Linux, and macOS (e.g. OSSEC, OSQuery, Sysmon, ETW, Windows Event Log, auditd, etc.)
</li>
<li>
Windows/Linux/macOS disk and memory forensics
</li>
<li>
Windows/Linux/macOS static and dynamic malware analysis with focus on highly evasive/complex threat agents
</li>
</ul>
</li>
<li>
Proficient in MITRE ATT&amp;CK framework and its application in the development of detection methods
</li>
<li>
Strong understanding of OS security hardening and controls for Windows (inclusive of Active Directory), Linux, and macOS
</li>
<li>
Foundational understanding of the following security tooling and methods:
<ul>
<li>
EDR tools for Windows, Linux, macOS (e.g. MS Defender ATP, SentinelOne, Carbon Black, CrowdStrike, etc.)
</li>
<li>
NGFW (PAN, CISCO, Fortinet, etc.)
</li>
<li>
SIEMs and Security Analytics platforms (e.g. Elastic, Open Source Big Data Stacks, Splunk, etc.)
</li>
</ul>
</li>
<li>
Ability to troubleshoot, educate, and share information with non-technical people
</li>
</ul>
In addition, you may have demonstrated leadership experience from previous projects, regardless of title held. Even if you haven’t worked with all of our specific technologies, you bring a diverse knowledge base that you use to help the team solve complex technical problems.

Interview Process
The interview process is approximately as follows:
<ul>
<li>
Phone pre-screening: A recruiter contacts you to briefly discuss your work history and provide an overview of Arctic Wolf. Approximately 30 minutes.
</li>
<li>
Technical assessment: A recruiter sends you a security research assessment to complete.
</li>
<li>
Face-to-face interviews: Several team members conduct interviews to learn more about you and provide more information about your potential role and team. Be prepared to collaborate on a technical problem and talk more about past projects and your career goals. Approximately 1 hour per interview.
</li>
</ul>
Security Requirements
<ul>
<li>
Conducts duties and responsibilities in accordance with AW’s Information Security policies, standards, processes, and controls to protect the confidentiality, integrity, and availability of AW business information assets.
</li>
<li>
Must pass a criminal background check and an employment verification as a condition of employment.
</li>
</ul>
Working at Arctic Wolf:
Arctic Wolf recognizes that success comes from delighting our customers, so we work together to ensure that happens every day. We believe in diversity and inclusion, and truly value the unique qualities and unique perspectives all employees bring to the organization. And we appreciate that—by protecting people’s and organizations’ sensitive data and aiming to end cyber risk— we get to work in an industry that is fundamental to the greater good.
All wolves receive compelling compensation and benefits packages, including:
<ul>
<li>Equity for all employees</li>
<li>Paid parental leave</li>
<li>Training and career development programs</li>
</ul>
If you're excited about this role, but do not meet all of the qualifications listed above, we still encourage you to apply. We review all applications and may yet consider you the right person for the role or have another open position where you’re the perfect fit.
Arctic Wolf is an Equal Opportunity Employer and considers applicants for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, genetics, or any other basis forbidden under federal, provincial, or local law.
Arctic Wolf is committed to fostering a welcoming, accessible, respectful, and inclusive environment that ensures equal access and participation for people with disabilities. Please let us know if you require any accommodations by emailing <a href="mailto:recruiting@arcticwolf.com" rel="noopener noreferrer nofollow ugc" target="_blank">recruiting@arcticwolf.com</a>.

Kitchener

Waterloo

Toronto

Senior Security Researcher

Apply to Macos Cyber Security Jobs in companies remotely and near you. New Macos Cyber Security Jobs added daily.

Job Position and Company	Location	Tags	Posted
Sr Enterprise Security Engineer II at Rubrik	Full Time Analyst Windows Automation AWS
ThreatOps macOS Researcher at Huntress	Remote Full Time Forensic Incident Response Windows
Information Security Engineer at SugarCRM	Remote Full Time Incident Response Windows Ansible
Senior Cloud Threat Intelligence Analyst at Recorded Future, Inc.	Remote Full Time Analyst Windows Android
Senior Security Researcher at Arctic Wolf Networks	Remote Full Time Consultant Analyst Windows

Macos Cyber Security Jobs

0 Macos Cyber Security Jobs. Page 1 of 1

5 closed macos cyber security jobs:

Subscribe to the weekly
Cyber Security Jobs Newsletter

Macos Cyber Security Jobs

All Cyber Security Jobs

Cyber Security Jobs by Category

Macos Cyber Security Jobs

0 Macos Cyber Security Jobs. Page 1 of 1

5 closed macos cyber security jobs:

Subscribe to the weekly Cyber Security Jobs Newsletter

Macos Cyber Security Jobs

All Cyber Security Jobs

Cyber Security Jobs by Category

Subscribe to the weekly
Cyber Security Jobs Newsletter