Cyber Security Engineer

免费注册后解锁"你的匹配分 vs 高分画像"与个人技能缺口。

Minimum requirements: First Degree in Information Technology Information Security related Certification (CISSP / CISM / GCIA , an Appropriate professional accreditation GCIH / Ethical Hacking (CEH), Offensive Security Certified Professional (OSCP) is preferred, GPEN, advantageous. Experience in developing threat models, risk profiles, cyber-security risk and incident management, and a solid understanding of crime in the financial sector. Solid understanding and familiarity of the MITRE ATT CK Framework. 5 to 8 years Experience performing threat hunting and leading threat hunting programs. Should also have experience in performing red team exercises. Must have 5 - 8 years experience and be very proficient with the common tools associated with cyber security operations centres e.g. proxy technologies, log management, correlation solutions, SIEM, SOAR and common security testing tools with solid understanding of voice and data networks, major operating systems, active directory, and their associated peripherals. Must demonstrate knowledge of tactics, techniques, and procedures associated with malicious insider activity and the cyber-attack kill chain, organized crime/fraud groups and both state and non-state sponsored threat actors. Threat intelligence, research, develop and perform hunting activities to proactively detect threat actors and their techniques, tools and processes. Recognize possible successful / unsuccessful intrusion attempts to compromise the network through analysis and hunting activities. Ability to perform dynamic malware analysis and extracting IOC (Indicator of compromise) information. React to any CSOC alerting (EDR, Qradar) and review for validity or false positives and modify alerts as needed. Demonstrate knowledge of tactics, techniques, and procedures associated with malicious insider activity and the cyber-attack kill chain, organized crime/fraud groups and both state and non-state sponsored threat actors.  Responsibilities: The Cyber Threat Hunter will proactively detect threats that evade traditional security controls. Research, develop, perform, and analyse the results of proactive and reactive host and network-based investigations to determine if malicious activity exists within the environment. Building customized threat hunts specifically tailored, including, malware research, to develop detections based off numerous inputs. In addition, the role will provide expert support to the cyber security incident response team and this role has a group wide mandate. Interface with industry peers to acquire and share Cyber Hunt best-practices in the sector. Originally posted on Himalayas

最低要求：信息技术信息安全相关认证的第一学位（CISSP / CISM / GCIA，适当的专业认证GCIH / 道德黑客（CEH），Offensive Security Certified Professional（OSCP）优先，GPEN为优势。具备开发威胁模型、风险画像、网络安全风险与事件管理的经验，并对金融领域犯罪有扎实理解。对MITRE ATT CK框架有扎实理解和熟悉。5至8年执行威胁狩猎和领导威胁狩猎项目的经验。还应具备执行红队演练的经验。必须拥有5至8年经验，并非常熟练地使用网络安全运营中心相关的常见工具，例如代理技术、日志管理、关联解决方案、SIEM、SOAR和常见安全测试工具，并对语音和数据网络、主要操作系统、活动目录及其相关外围设备有扎实理解。必须展示对与恶意内部人员活动相关的战术、技术和程序以及网络攻击杀伤链、有组织犯罪/欺诈团体以及国家和非国家支持的威胁行为者的知识。威胁情报，研究、开发并执行狩猎活动，以主动检测威胁行为者及其技术、工具和流程。通过分析和狩猎活动识别可能成功/不成功的入侵尝试以攻陷网络。能够执行动态恶意软件分析并提取IOC（妥协指标）信息。对任何CSOC告警（EDR、Qradar）做出反应，并审查其有效性或误报，并根据需要修改告警。展示对与恶意内部人员活动相关的战术、技术和程序以及网络攻击杀伤链、有组织犯罪/欺诈团体以及国家和非国家支持的威胁行为者的知识。 职责：网络威胁狩猎者将主动检测规避传统安全控制的威胁。研究、开发、执行并分析主动和被动基于主机和网络的调查结果，以确定环境中是否存在恶意活动。构建专门定制的威胁狩猎，包括恶意软件研究，以基于众多输入开发检测。此外，该角色将为网络安全事件响应团队提供专家支持，并且该角色具有全集团授权。与行业同行交流，以获取并分享该领域的网络狩猎最佳实践。最初发布于Himalayas

⚑ 岗位信息收录自公开招聘页（Himalayas），以雇主官网为准