Security Researcher

About the Role The Detection Developer will play a crucial role in enhancing our security posture by developing and optimizing detection mechanisms for various network threats. Responsibilities 6 or more years of detection authoring experience with a focus on the following key areas: NDR/IPS/IDS detections/signatures Development of anomaly and behavioural based detections Tuning and optimization of detections Expertise on the inner workings of networking, protocols (TCP/IP, DNS, HTTP), protocol analysers, Suricata/snort rules, and other network-related threat management domain topics, e.g. LDAP, NTLM, etc. Proven ability and experience to research and develop security detections related to network threat vectors. Experience using MITRE ATT&CK, PCAP analysis, and threat intelligence feeds. Experience with 3rd-party firewalls, IDS/IPS and network edge devices, their capabilities and configuration is a bonus, but minimally understanding their use and vulnerabilities. We use and train a va...