Apply: Security Engineer (Threat Hunter)

• Senior role in a market leading internet company
• Permanent Position

We are looking for a Senior Security Engineer with strong experience in Intrusion Detection, Incident Response, Threat Hunting and Threat Intelligence.

Responsibilities:
- Analyze, normalize and correlate various log sources to identify abnormal and/or malicious behavior through our big data SIEM.
- Monitor, respond and fine-tune alerts generated on our big-data SIEM by security systems (AV, NIDS, HIDS, EDR, etc.).
- Respond to security incidents and perform digital forensic investigation.
- Actively hunt and search for indicators and/or sings of external attackers, our internal Red Team and define new detection rules or improve existing ones.
- Define IOCs based on past attacks and external threat intelligence feeds.
- Develop and leverage the Threat Intelligence Platform.
- Develop Tactical and Operational Intelligence.
- Investigate malware activity and define related IOCs or contextual detection rules.
- Write and maintain Security Operations playbooks and standard operating procedures.
- Share knowledge and train teammates

Minimum qualifications:
- 7 years of experience in Intrusion Detection, DFIR and/or Threat Hunting.
- Good understanding of TTPs and the ATT&CK Framework.
- In-depth knowledge of how operating systems operate and how to detect malicious activity.
- Linux and Windows computer forensics and memory analysis.
- Experience with a Threat Intelligence Platform.
- Programming experience in Python, Shell scripting or other languages.
- BS/MS in Computer Science.
- Available to work on-call and on occasional overtime (weekends, sale campaigns, etc.).
- Passionate, curious, eager to learn. Focused, result oriented, positive and constructive.

Preferred qualifications:
- Familiar with Big Data environment and Query languages
- Log management and SIEM experience
- Malware analysis and Reverse-engineering experience.
- MacOS forensics
- Penetration testing / red-team experience.

Nice to have:

GNFA, GCTI, GREM, OSCP, OSCE, GCIA, GCIH, GCFE, GCFA, GREM, GMON, GCUX, GCWN

 

Reg No. R1653400

BeathChapman Pte Ltd

Licence no. 16S8112