Challenges You Will Solve
The Cyber Incident Response Team (CIRT) continues to push the boundaries of threat detection and response with a unique combination of operations, threat research, and engineering in tight integration with the development team that designs our analysis platform and the Red Canary Threat Detection Engine.
The security landscape is always shifting and introducing new adversaries. The Red Canary CIRT operates 24/7 to track down threats in endpoint data and deliver fast and actionable detections to our customers.
This is not a role where you are encouraged to passively accept the current state. At Red Canary, you are empowered to actively look for opportunities to automate repetitive and tedious tasks. We let the automation framework handle the mundane tasks, so that you can remain focused on solving complex and critical problems for our customers.
It is expected at the Senior Detection Engineer level, that you already have the skills necessary to immediately contribute to the operational and project needs of the CIRT. This is accomplished by performing analysis of malware, improving our detector footprint, implementing code that will improve our CIRT platform, and more.
What You'll DoUse Red Canary’s detection platform, endpoint data, and external resources to uncover threats and tell the story of what occurred in a customer environmentPerform advanced malware analysisBuild new detection capabilities into the Red Canary platform based on your research of new attack techniquesLeverage previous SOC experience to enhance the CIRT’s knowledge-base and expertiseImprove the CIRT workflow through automationInitiate and undertake tasks of writing and implementing code in the CIRT platform to fix or improve the operational workflowActively engage with the CIRT team to challenge the status quo for detecting adversarial behaviorContribute to improvements that will increase the quality of the Red Canary productHelp lead projects to improve the quality of life for both the customer and the CIRTWhat You'll BringStrong analytical and problem-solving skillsLeads projects and takes ownership of processesAbility to work in a fast-paced, operational environment and successfully prioritize important tasksDeep understanding of adversary tactics and techniquesExperience working with endpoint telemetry/EDR security products and building queries to identify potential threatsTechnical proficiencies across Windows. Linux, and MacOSExperienced working with programming languages such as Ruby, Python, Rails preferred
Note: The Detection Engineering team operates on a 24/7 shift schedule.
Targeted base salary range: $115,360 - $136,500 + bonus eligibility and equity depending on experience.
Benefit Highlights:
- 100% Paid Premiums: Red Canary offers a 100% paid plan option for medical, dental and vision for you and your dependents. No waiting period.
- Health & Wellness - Access to mental health services, Employee Assistance Program and additional programs to incentivize healthy habits.
- Fertility Benefits: All new hires are eligible for benefits as of their first day.
- Flexible Time Off: Take the time you need to recharge including vacation, sick, bereavement, jury duty, and holidays.
- Paid Parental Leave- Full base pay to bond/care for your new child.
- Pre-Tax Plans - Red Canary offers a variety of plans to fit you and your dependent specific needs including FSA, HRA and HSA, with employer funding to offset out of pocket health care expenses.
- Flexible Work Environment- With 60% remote workforce, Canaries can work virtually from almost anywhere in the US.
The application deadline is November 1st, 2024.
