DRW - Threat Specialist
Requirements
• A bachelor’s degree, or equivalent experience for 1-3 years in industry • Interest in digital forensics and physical security • A passion for security and problem solving • Heightened attention to detail and forward thinking • Strong knowledge of either Windows, MacOS, or Linux with an interest in learning the details of platforms that you might not have experience with • Knowledge of the Incident Response Cycle • Knowledge of static & dynamic malware analysis, including network packet captures • Knowledge of core networking & cloud security concepts • Experience with Security Information and Event Management (SIEM) products • Experience with Endpoint Detection & Response (EDR) products • Experience with SOAR (Security Orchestration, Automation, and Response) products • Experience with data analysis of events in security related sources such as IPS, Web Security, Endpoint Protection, Event Logs • Experience working with GitHub • Experience with PowerShell, Bash, Python, Ruby, or Perl • Exceptional time management skills • Excellent verbal and written communication skills • For more information about DRW's processing activities and our use of job applicants' data, please view our Privacy Notice at https://drw.com/privacy-notice. • #LI-SH1
Responsibilities
• Perform triage of global security alerts generated from various sources (including IPS, Web Security, Event Logs, Endpoint Protection, Brand Protection, Phishing) • Respond to any incidents identified from analysis of security alerts • Triage & route internal support tickets sent to the Security team • Creation & revision of threat detections • Perform SIEM product administration for event correlation and threat detection • Perform SOAR playbook/dashboard management and product administration • Provide insider threat investigation assistance to teams of internal stakeholders • Drive automated detection, response, and configuration through various scripting and programming languages • Evaluate commercial and open-source tools as needed • Collaborate with internal Infosec peers to continuously improve security posture • Contribute to internal documentation of standard processes & procedures • Educate users on security best practices • Assess security risks as they relate to new projects and initiatives • Attend security conferences, seminars, and regular training to stay ahead of the ever-changing security landscape
Apply in one click
Upload My Resume
Drop here or click to browse · Tap to choose · PDF, DOCX, DOC, RTF, TXT