Sr Detection Engineer
BeyondTrust is a place where you can bring your purpose to life through the work that you do, creating a safer world through our cyber security SaaS portfolio.
Our culture of flexibility, trust, and continual learning means you will be recognized for your growth, and for the impact you make on our success. You will be surrounded by people who challenge, support, and inspire you to be the best version of yourself.
As a Senior Detection Engineer, you’ll use your deep security domain knowledge to help build a new ITDR solution with a security lake at its center. You’ll become an identity security expert, and along with a team of like-minded individuals you will figure out new and innovative ways to counter modern identity threats, setting a clear vision for the detection portion of the product and driving and implementing our detection roadmap. You will be challenged daily with some of the hardest technology and security problems within the company.
What You’ll Do:
- Define and deliver innovative solutions for detecting identity-based attacks and vulnerabilities using rule-based analytics, behavioral analytics, and machine learning.
- Provide technical leadership to support product and engineering teams developing threat detection and response capabilities.
- Explore customer data using spark and other tools to test detection hypotheses.
- Implement detections using pyspark and spark sql.
- Continuously collect and analyze telemetry from detections in the field and tune them for quality.
- Develop ML models to support advanced detections.
- Build custom representations of data (e.g. graphs) to support other advanced detections.
What You’ll Bring:
- Experience working and querying SIEM tools or other log-based data
- Experience in engineering event detection & response tuning
- Knowledge of MITRE ATT&CK framework and general adversarial / defensive security techniques
- Ability to engineer creative, scalable, and out-of-the-box solutions
- Up to date with engineering best practices, security technology trends, tools, and frameworks
- Experience in developing detections for attacker tactics, techniques, and procedures (TTPs)
- Preferred: Knowledge of cloud technologies, virtualization, containers, service-mesh
- Big data experience or a willingness to learn!
Technologies You Should Know
- Preferred: Spark
- Required: Python
- Preferred: Big data experience