About the Role
The Detection Developer will play a crucial role in enhancing our security posture by developing and optimizing detection mechanisms for various network threats.
Responsibilities
6 or more years of detection authoring experience with a focus on the following key areas:
NDR/IPS/IDS detections/signatures
Development of anomaly and behavioural based detections
Tuning and optimization of detections
Expertise on the inner workings of networking, protocols (TCP/IP, DNS, HTTP), protocol analysers, Suricata/snort rules, and other network-related threat management domain topics, e.g. LDAP, NTLM, etc.
Proven ability and experience to research and develop security detections related to network threat vectors.
Experience using MITRE ATT&CK, PCAP analysis, and threat intelligence feeds.
Experience with 3rd-party firewalls, IDS/IPS and network edge devices, their capabilities and configuration is a bonus, but minimally understanding their use and vulnerab...