Threat Detection Researcher - Google SecOps
Threat Detection Researcher - Google SecOps
Employer Active
Job Alert
You will be updated with latest job alerts via email
Share
Job Alert
You will be updated with latest job alerts via email
Job Description
Come join Deepwatchs team of world-class cybersecurity professionals and the brightest minds in the industry. If youre ready to challenge yourself with work that matters then this is the place for you. Were redefining cybersecurity as one of the fastest growing companies in the U.S. and we have a blast doing it!
Who We Are
Our core values drive everything we do at Deepwatch including our approach to tackling tough cyber challenges. We seek out tenacious individuals who are passionate about solving complex problems and protecting our customers. At Deepwatch every decision process and hire is made with a focus on improving our cybersecurity solutions and delivering an exceptional experience for our customers. By embracing our values we create a culture of excellence that is dedicated to empowering our team members to explore their potential expand their skill sets and achieve their career aspirations which is supported by our unique annual professional development benefit.
Deepwatch recognition includes:
- and 2021 Great Place to Work Certified
- 2024 Military Times Best for Vets Employers
- 2024 US Department of Labor Hire Vets Gold Award
- 2024 Forbes Americas Best Startup Employers
- 2024 Cyber Defense Magazine Global Infosec Awards
- 2023 and 2022 Fortress Cybersecurity Award
- 2023 $180M Series C investment from Springcoast Capital Partners Splunk Ventures and Vista Credit Partners of Vista Equity Partners
- 2022 Cybersecurity Excellence Award for MDR
Threat Detection Researcher
This job is hybrid; candidates must be available to work in Tampa 3 days per week.
Reporting to the Manager Threat Detection Research the Threat Detection Researcher will participate in cybersecurity detection strategy creation tuning validation and correlation to ensure that Deepwatch customers have effective detections in place against an ever-changing threat landscape. Deepwatch Threat Detection Researchers perform a wide array of tasks in an effort to increase Deepwatchs detection capabilities detection fidelity and ensure Deepwatch is able to effectively detect and respond to cyber threats.
Threat Detection Researchers play a key-role in researching and developing new detection capabilities and refining existing detection capabilities for Deepwatchs customers. Through these detection capabilities Threat Detection Researchers will have a direct impact on Deepwatchs ability to effectively detect and respond to security threats
In this role youll get to:
- Evaluate current monitoring and detection capabilities to identify areas for improvement
- Manage detection capabilities to ensure appropriate coverage effective operation and adherence to deepwatch standards
- Detection Research
- Detection Creation
- Detection Tuning
- Assist in the development of Deepwatchs detection strategy researching new threats technologies and developing new detections
- Research and assist in the design of risk based detection mechanisms
To be successful in this role youll need:
- Experience with Google SecOps / Yara-L
- Cybersecurity experience in a technical role or experience working in a SOC/MDR/MSSP
- Ability to engineer creative scalable and out-of-the-box solutions
- Stay up to date with cybersecurity best practices security technology trends tools and frameworks
- Experience working with and creating detections for SIEM tools and/or EDR platforms
- Understanding of common enterprise technologies and logging capabilities including Cloud IDS/IPS Firewalls Active Directory Anti-Virus/EDR Proxies and Email Gateway
- Understanding of various attack frameworks such as MITRE ATT&CK and general adversarial / defensive security techniques (e.g. the Cyber Kill Chain and NIST)
- Ability to communicate and document technical information effectively towards various audiences
- Experience working with version control systems to facilitate documentation of detection signatures
- Understanding of Threat Actors and their corresponding TTPs
- Ability to translate forensic and threat intelligence reports into detection capabilities
- Experience working with lab environments and simulation tools to test detection efficacy
- Understanding of sigma/yara as a detection framework
Statutory Pay Disclosure
The anticipated salary range for this role is $13000 to $150000 stock options benefits. Actual compensation may vary from posted hiring range based upon geographic location work experience education and/or skill level.
ITAR Compliance
This position will have access to customer data and as such is subject to International Traffic in Arms Regulations (ITAR). Upon application candidates will be asked to confirm that they are a U.S. Person as defined by the following:
- A citizen of the U.S.;
- A lawful permanent resident of the United States;
- A person admitted to the United States as a refugee; or
- A person that has been granted asylum by the United States government.
The intent of this requirement is not to verify employment eligibility overall but to ensure compliance with import/export regulations. If you do not meet these requirements we encourage you to apply for other open roles at Deepwatch. This information will be verified upon offer of employment.
What We Offer:
Deepwatch is excited to provide benefits designed to support team members and their families. Including:
- Medical dental vision and disability insurance
- Flexible Time Off (FTO) 9 company holidays sick leave and 8-Weeks Paid Parental Leave
- Unique professional development benefits starting at $3000 annually
- Wellness contests and monthly educational programs
- 401(K) retirement program with employer match
- Learn more here: Deepwatch Benefits
We know theconfidence gapandimposter syndrome can get in the way of meeting spectacular candidates so please dont hesitate to apply wed love to hear from you. Please review our DEI Statement here.
- Be interested in and able to work remotely from a home office when not at a corporate office
- Pass a pre-employment background check in accordance with applicable laws
Deepwatch is an equal opportunity employer and all qualified applicants will receive consideration for employment without regard to race color religion sex national origin age disability status marital status sexual orientation gender identity genetic information protected veteran status or any other characteristic protected by law. In compliance with federal law all persons hired will be required to verify identity and eligibility to work in the United States and to complete the required employment eligibility verification document form upon hire.
By submitting your application you agree that Deepwatch may collect your personal data for recruiting global organization planning and related purposes. The Deepwatch Privacy Policy explains what personal information we may process where we may process your personal information our purposes for processing your personal information and the rights you can exercise over Deepwatchs use of your personal information.
Employment Type
Full-Time
