Talent.com
Threat Intelligence and Detection Engineer

Threat Intelligence and Detection Engineer

Insane CyberSan Antonio, TX, US
9 days ago
Job type
  • Full-time
Job description

Job Description

Job Description

Salary :

At Insane Cyber, were focused on advancing cybersecurity for the better. Weve developed innovative tools backed by expert support to change how organizations perform deep level proactive and reactive analysis. We partner with our customers to provide cutting-edge solutions and services to help protect our critical infrastructure and critical operations from threats from the power grid to manufacturing.

Our flagship Valkyrie and Cygnet products provide host and network analysis automation beyond the capabilities of other products on the market. Our Corvus and Aesir product lines deliver managed and professional services to help assess and fill gaps and weaknesses in the security posture of clients' security programs.

Its an exciting time for us as we continue to grow our products and services, and we need a great team in place!

As we grow, we are seeking aThreat Intelligence and DetectionEngineer to join our team. This role is crucial for the continued development and enhancement of our flagship products, Valkyrie and Cygnet. You will be a key player in our professional services team, bringing your expertise and innovative thinking to advance our technology and maintain our competitive edge in the market.

Responsibilities

  • Provide expert proactive and reactive consultancy services to clients, helping them understand and mitigate cybersecurity risks. Typical services include, but are not limited to threat hunting, incident response, digital forensics, and architecture reviews
  • Keep up with current and emerging threats and develop innovative ways to implement detection of threats in Valkyrie and Cygnet with both host and network data
  • Collaborate with engineering, professional services, external customers and other internal and external groups to identify, architect, develop and deliver capabilities to end users
  • Perform analysis and investigations, correlating events and data to detect security incidents
  • Participate in incident response efforts throughout the IR life cycle.
  • Develop and maintain security incident response plans
  • Operationalize, monitor, and optimize security and network monitoring solutions
  • Improve observability and monitoring of the customer environments, collaborating with internal and customer teams to enhance visibility into security events and incidents
  • Apply working experience with protocol dissection and proprietary protocol analysispreferably

in the industrial space

  • Work with a cross-functional team to develop new detections specifically for industrial environments
  • Deliver solutions to and manage cybersecurity projects, ensuring alignment with client needs and best industry practices
  • Build and maintain strong relationships with clients, acting as a trusted advisor in cybersecurity matters
  • Ensure the quality and timeliness of service delivery, adhering to project deadlines and client expectations
  • Stay updated on the latest cybersecurity trends and technologies, applying this knowledge to improve service quality
  • Qualifications

  • Minimum 3-5 years of full-time experience in cybersecurity
  • Bachelors or Masters degree in Information Technology, Cybersecurity, or a related field, or equivalent experience
  • Experience in digital forensics, incident response, or threat hunting is a plus
  • Experience in industrial sectors, Operational Technology (OT), Industrial Control Systems (ICS) and / or critical operations assurance is a plus
  • Experience in a startup or rapidly growing professional services organization is a plus
  • Working knowledge of proprietary and open-source threat detection engines and rulesets (Suricata, Yara, Sigma, Zeek, etc.)
  • Working experience with host and network data analysis across packet capture files, host logs, registry, memory and / or disk artifacts
  • Working knowledge of major nation state and criminal level threats and experience building host and network detections to identify those threats
  • Deep working knowledge of MITRE ATT&CK, D3FEND, or other threat modeling frameworks
  • [Nice to Have] Proficiency in backend languages and frameworks, such as Python, JavaScript, C, Go, Rust, or similar technologies
  • Proven track record of successful delivery in a consulting environment
  • Excellent client relationship management skills and the ability to explain complex technical concepts clearly
  • Strong communication skills, collaboration mindset, and an ability to learn quickly required
  • Benefits

  • Competitive Base Salary
  • Equity offering subject to boardapproval
  • Comprehensive medical / dental / vision / life insurance plan
  • Retirement plan with employer match
  • Flexible working hours and generous time-off policy
  • Insane Cyber is proud to be an equal-opportunity employer. We celebrate diversity and strive to foster an inclusive environment for all employees. If you're a visionary with a passion for pushing the boundaries of industrial cybersecurity, we'd love to hear from you.

    Create a job alert for this search

    Detection Engineer • San Antonio, TX, US

    Related jobs
    • Promoted
    Threat Intelligence Specialist

    Threat Intelligence Specialist

    VirtualVocationsSan Antonio, Texas, United States
    Full-time
    A company is looking for a Threat Intelligence Specialist to manage critical global law enforcement inquiries.Key Responsibilities Respond to high-priority, time-sensitive requests from law enfor...Show moreLast updated: 2 days ago
    • Promoted
    Security Engineer

    Security Engineer

    VirtualVocationsSan Antonio, Texas, United States
    Full-time
    A company is looking for a Security Engineer.Key Responsibilities Develop and implement security measures for cloud and systems Work with various operating systems and real-time operating system...Show moreLast updated: 30+ days ago
    • Promoted
    FIPS 140 Security Engineer

    FIPS 140 Security Engineer

    VirtualVocationsSan Antonio, Texas, United States
    Full-time
    A company is looking for a FIPS 140 Security Engineer to support national defense through IT security projects.Key Responsibilities Work on varied FIPS 140 validation projects including general s...Show moreLast updated: 13 days ago
    • Promoted
    • New!
    Senior Threat Research Engineer

    Senior Threat Research Engineer

    VirtualVocationsSan Antonio, Texas, United States
    Full-time
    A company is looking for a Senior Threat Research Engineer.Key Responsibilities Research novel cloud-based cyber attacks and report findings Develop threat intelligence based on malware analysis...Show moreLast updated: 15 hours ago
    • Promoted
    Detection Engineer

    Detection Engineer

    VirtualVocationsSan Antonio, Texas, United States
    Full-time
    A company is looking for a Detection Engineer (1st Shift).Key Responsibilities Analyze EDR telemetry and alerts across various detection domains Publish threat reports with clear communication o...Show moreLast updated: 30+ days ago
    • Promoted
    Senior Security Engineer

    Senior Security Engineer

    VirtualVocationsSan Antonio, Texas, United States
    Full-time
    A company is looking for a Senior / Staff Security Engineer to enhance and secure its corporate infrastructure.Key Responsibilities Design, implement, and manage security for corporate endpoints an...Show moreLast updated: 30+ days ago
    • Promoted
    Senior Cyber Security Engineer

    Senior Cyber Security Engineer

    VirtualVocationsSan Antonio, Texas, United States
    Full-time
    A company is looking for a Senior Cloud Security Engineer to join their team.Key Responsibilities Manage enterprise-wide security tools and platforms, including SIEM, DLP, and vulnerability manag...Show moreLast updated: 30+ days ago
    • Promoted
    Certified Surgical Technologist Full Time Days RBH

    Certified Surgical Technologist Full Time Days RBH

    Resolute Health HospitalNEW BRAUNFELS, Texas, United States
    Full-time
    This position may qualify for a sign-on bonus.Provides direct and indirect technical care to surgical / obstetric patients along the continuum of the age spectrum facilitating the safe and effective ...Show moreLast updated: 30+ days ago
    • Promoted
    Security Engineer, IDAM

    Security Engineer, IDAM

    VirtualVocationsSan Antonio, Texas, United States
    Full-time
    A company is looking for a Security Engineer, IDAM Operations.Key Responsibilities Manage user access provisioning and resolve access issues Support complex application account provisioning and ...Show moreLast updated: 2 days ago
    • Promoted
    Border Patrol Agent

    Border Patrol Agent

    U.S. Customs and Border ProtectionVon Ormy, TX, United States
    Full-time
    Customs and Border Protection (CBP) offers those interested in a career in law enforcement an exceptional opportunity to work with an elite team of highly trained professionals whose camaraderie, p...Show moreLast updated: 30+ days ago
    • Promoted
    IAM Security Analyst

    IAM Security Analyst

    VirtualVocationsSan Antonio, Texas, United States
    Full-time
    A company is looking for an IAM Security Analyst.Key Responsibilities Execute user access certifications for compliance and collaborate with audit teams Enhance IAM controls and participate in d...Show moreLast updated: 30+ days ago
    • Promoted
    Information Security Engineer

    Information Security Engineer

    VirtualVocationsSan Antonio, Texas, United States
    Full-time
    A company is looking for an Information Security Engineer to join their Information Security and Technology team.Key Responsibilities Drive decision-making for platform and application security a...Show moreLast updated: 30+ days ago
    • Promoted
    • New!
    AI Security Architect

    AI Security Architect

    VirtualVocationsSan Antonio, Texas, United States
    Full-time
    A company is looking for an AI Security Architect to enhance the security of AI products through the development of secure methodologies. Key Responsibilities Define the Secure Development Life Cy...Show moreLast updated: 7 hours ago
    • Promoted
    Threat Intelligence Analyst

    Threat Intelligence Analyst

    VirtualVocationsSan Antonio, Texas, United States
    Full-time
    A company is looking for a Threat Intelligence Reporting Analyst.Key Responsibilities Produce actionable intelligence reports for defenders and counter abuse teams Report on threats to enable fi...Show moreLast updated: 30+ days ago
    • Promoted
    Cyber Security Engineer (SME)

    Cyber Security Engineer (SME)

    Govcio LLCSan Antonio, TX, United States
    Full-time
    Cybersecurity Engineer SME to support a Zero-Trust Architecture modernization project.Lackland AFB in San Antonio, TX.Required Skills and Experience. Clearance Required : Top Secret / SCI.CISSP or othe...Show moreLast updated: 7 days ago
    F5 Security Engineer - Active TS / SCI with CI Poly

    F5 Security Engineer - Active TS / SCI with CI Poly

    ENS Solutions, LLCSan Antonio, TX, US
    Full-time
    Quick Apply
    Participate in the development and support of customer technical requirements .Champion a collaborative, team-based environment, sharing standard methodologies and success and building positiv...Show moreLast updated: 13 days ago
    • Promoted
    Threat Hunter

    Threat Hunter

    VirtualVocationsSan Antonio, Texas, United States
    Full-time
    A company is looking for a Threat Hunter to proactively identify and mitigate threats using advanced SPL queries in Splunk. Key Responsibilities Develop SPL queries to detect IOCs, anomalies, and ...Show moreLast updated: 2 days ago
    • Promoted
    • New!
    Mid-Level Detection Engineer

    Mid-Level Detection Engineer

    VirtualVocationsSan Antonio, Texas, United States
    Full-time
    A company is looking for a Detection Engineer (Mid-Level) to join their team remotely.Key Responsibilities Develop custom detection logic across SIEM, EDR, and other security tools Leverage thre...Show moreLast updated: 11 hours ago