Detection Operations Engineer
Arlington, Virginia
Employer: Rapid7
Industry: Professional Services
Salary: Competitive
Job type: Full-Time
About the Team
Rapid7's Threat Intelligence & Detection Engineering (TIDE) team is built from the ground up to provide our customers with high-fidelity threat detections and alerting that limit threat actor dwell time and impact across our customers' ecosystems. Our TIDE team uses purposeful research, threat intelligence curation, observed malicious behavior, and informed collaboration to ensure that our detections evolve along with the ever-changing threat and technological landscape.
About the Role
As a Detection Operations Engineer, you will be responsible for the upkeep and evaluation of the detection library for the MDR service. Our team's mission is to empower excellence in our customer's security posture by continuously refining Rapid7's detection library, enhancing their effectiveness to swiftly identify incidents while reducing analyst strain. Our vision is to lead with an unparalleled, state-of-the-art, and globally recognized detection library to set new standards in cybersecurity. You will collaborate closely with the SOC and Data Science teams to identify patterns of activity to improve detections, assist with the creation of new data models, and constantly update the collective understanding of threats.
In addition, you will learn from IR engagements, SOC incidents, and a variety of other sources and apply that knowledge to inform new detections for use across our customer base. You won't be alone in this endeavor, and your TIDE colleagues will be there to answer questions, provide guidance, and assist you as you develop.
In this role, you will:
The skills you'll bring include:
We know that the best ideas and solutions come from multi-dimensional teams. That's because these teams reflect a variety of backgrounds and professional experiences. If you are excited about this role and feel your experience can make an impact, please don't be shy - apply today.
About Rapid7
At Rapid7, we are on a mission to create a secure digital world for our customers, our industry, and our communities. We do this by embracing tenacity, passion, and collaboration to challenge what's possible and drive extraordinary impact.
Here, we're building a dynamic workplace where everyone can have the career experience of a lifetime. We challenge ourselves to grow to our full potential. We learn from our missteps and celebrate our victories. We come to work every day to push boundaries in cybersecurity and keep our 11,000+ global customers ahead of whatever's next.
Join us and bring your unique experiences and perspectives to tackle some of the world's biggest security challenges.
All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, age, national origin, disability, protected veteran status or any other status protected by applicable national, federal, state or local law.
Rapid7's Threat Intelligence & Detection Engineering (TIDE) team is built from the ground up to provide our customers with high-fidelity threat detections and alerting that limit threat actor dwell time and impact across our customers' ecosystems. Our TIDE team uses purposeful research, threat intelligence curation, observed malicious behavior, and informed collaboration to ensure that our detections evolve along with the ever-changing threat and technological landscape.
About the Role
As a Detection Operations Engineer, you will be responsible for the upkeep and evaluation of the detection library for the MDR service. Our team's mission is to empower excellence in our customer's security posture by continuously refining Rapid7's detection library, enhancing their effectiveness to swiftly identify incidents while reducing analyst strain. Our vision is to lead with an unparalleled, state-of-the-art, and globally recognized detection library to set new standards in cybersecurity. You will collaborate closely with the SOC and Data Science teams to identify patterns of activity to improve detections, assist with the creation of new data models, and constantly update the collective understanding of threats.
In addition, you will learn from IR engagements, SOC incidents, and a variety of other sources and apply that knowledge to inform new detections for use across our customer base. You won't be alone in this endeavor, and your TIDE colleagues will be there to answer questions, provide guidance, and assist you as you develop.
In this role, you will:
- Utilize Rapid7's world-class software and threat intelligence to improve the current InsightIDR detection library
- Collaborate closely with SOC Analysts, the Data Science team, Incident Response (IR) Consultants, Customer Advisors, and security researchers
- Assist in researching of attacker behaviors and techniques using information gathered from IR engagements, minor incidents and malicious activity discovered through various telemetry sources
- Conduct detection testing in a controlled environment
- Use a variety of skills to build rules that detect evil across network, endpoint and cloud services
The skills you'll bring include:
- 3+ years as a SOC Analyst/Incident Responder/Offensive security practice experience OR 2+ years of cyber threat intelligence/research/detection engineering experience
- A solid understanding of how threat actors utilize tactics such as lateral movement, privilege escalation, defense evasion, persistence, command and control, and exfiltration
- Experience with hands-on analysis of forensic artifacts and/or malware samples
- Effective collaboration between different teams
- Innovative problem solving mindset
- Strong ability to perform research (search for, organize, and evaluate information)
- Strong written and verbal skills
We know that the best ideas and solutions come from multi-dimensional teams. That's because these teams reflect a variety of backgrounds and professional experiences. If you are excited about this role and feel your experience can make an impact, please don't be shy - apply today.
About Rapid7
At Rapid7, we are on a mission to create a secure digital world for our customers, our industry, and our communities. We do this by embracing tenacity, passion, and collaboration to challenge what's possible and drive extraordinary impact.
Here, we're building a dynamic workplace where everyone can have the career experience of a lifetime. We challenge ourselves to grow to our full potential. We learn from our missteps and celebrate our victories. We come to work every day to push boundaries in cybersecurity and keep our 11,000+ global customers ahead of whatever's next.
Join us and bring your unique experiences and perspectives to tackle some of the world's biggest security challenges.
All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, age, national origin, disability, protected veteran status or any other status protected by applicable national, federal, state or local law.
Created: 2024-06-22
Reference: R7714
Country: United States
State: Virginia
City: Arlington
ZIP: 22209
Similar jobs:
-
Data Center Engineering Operations Tech, DCC Communities
Amazon in Ashburn, Virginia -
Cyber Defense Operations Security Engineer
SAIC in Ashburn, Virginia -
Technical Operations Manager, Support Engineering
Amazon in Herndon, Virginia💸 $108900 per year -
Engineering Operations Tech, DCEO Engr 4 - AG (L4)
Amazon in Culpeper, Virginia -
Data Center Engineering Operations Technician, DCEO
Amazon in Herndon, Virginia -
Data Center Operations Engineer - TS/SCI with Polygraph required
General Dynamics Corporation in Warrenton, Virginia -
Sr. Systems Dev Engineer (L6), Facility Operations Systems Engineering
Amazon in Herndon, Virginia -
Engineering Operations Tech, DCEO Engr 4 - AG (L4)
Amazon in Culpeper, Virginia -
Cyber Defense Operations Security Engineer
SAIC in Portsmouth, Virginia -
Engineering Operations Tech, DCEO Engr 4 - AG (L4)
Amazon in Culpeper, Virginia -
Sr. Elasticsearch Operations Engineer
Qbase in Reston, Virginia -
Data Center Technical Operations Engineer I
INTELLISWIFT INC in Sterling, Virginia💸 $38 per hour -
Engineering Operations Tech, DCEO Engr 4 - AG (L4)
Amazon in Culpeper, Virginia -
Engineering Operations Manager, Service Design Lead
Jacobs in Warrenton, Virginia -
Cyber Defense Operations Security Engineer
SAIC in Fort Belvoir, Virginia -
Network Administration and Operations Engineer
Leidos Holding in Virginia Beach, Virginia💸 $55250.00 per year -
System Development Engineer I, Facility Operations Systems Engineering
Amazon in Herndon, Virginia -
Senior Detection Operations Engineer
Rapid7 in Arlington, Virginia -
Engineering Operations Tech, DCEO Engr 4 - AG (L4)
Amazon in Culpeper, Virginia -
Engineering Operations Technician
Amazon in Ashburn, Virginia