Senior Threat Researcher TD&R.

What You’ll Do

You will help to identify, analyze, and classify potential threats and malicious activity using the power of Cisco Cognitive Intelligence machine learning capabilities. You will help design new ways of identifying and tracking down threat actors mostly (but not only) on network data. You will be collaborating with highly skilled machine learning experts, and security community and in close touch with our customers. You will participate in publishing security blogs and reports, and you will help measuring and improving efficacy of our detections. 

Who You’ll Work With

We are a team originating from 5 former startups. We keep an agile, fun, passionate upstart culture within Cisco but we benefit from Cisco expertise and the position in the security market. 

We are developing complex systems for network cyber threats detection and cross domain detections using Machine learning and Artificial intelligence. We analyze network traffic, endpoint, and email of many millions of the devices all over the world to detect suspicious behavior. We contribute our technology to several Cisco security products. The local Threat Research Team works closely with R&D to propagate threat research to the products. We build and maintain the core threat intelligence.

Who You Are

We are looking for a senior threat researcher to join our threat research team. We look for an expert with the ability to potentially lead the threat research, formulate the strategy and priorities based on deep domain knowledge.

Minimum qualifications for the role:

MSc with solid relevant experience

Fluent English

Threat hunting skills, experience in writing detection rules, OSINT and MITRE ATT&CK, Diamond Model, Cyber Kill Chain

Experience with workflow automation through scripting

Experience with threat intelligence platforms e. g. MISP, OpenIOC, ThreatQ

Knowledge of the current threat landscape, and the goals and methods of current malicious actors

Solid knowledge of network security, network traffic analysis, and threat intelligence

Understanding of core networking protocols (DNS, TLS, HTTP, etc.)

Capability to formulate, explain, and present arguments. Proactive end to end problem solving and team player approach.

Desired Skills:

Team leading skills, systematic and patient attitude

Previous experience on threat intelligence production