Dragos, Inc. · 2 days ago

Senior Detection Engineer

United States

Full-time

Remote

Senior Level

$145K/yr - $145K/yr

5+ years exp

Wonder how qualified you are to the job?

Maximize your interview chances

Cyber SecurityNetwork Security

Hiring Manager

Nick Hall

Insider Connection @Dragos, Inc.

Discover valuable connections within the company who might provide insights and potential referrals, giving your job application an inside edge.

Responsibilities

Participate in efforts for discovering and cataloging OT assets using advanced detection methodologies.

Work in tandem with reverse engineers to decipher proprietary protocols and uncover asset attributes using vendor documentation and protocol specifications.

Partner with developers to integrate findings into Dragos’s threat detection and response platform.

Contribute to the creation of detection logic and rules for real-time threat monitoring of atomic operations.

Troubleshoot and fix both internal engine configurations and python analytics use for asset identification and atomic operations.

Integrate with teams CI/CD and testing standards, authoring unit, integration, and end two end tests to verify characterizations and detections are working as expected.

Collect PCAPs using OSINT, Generate PCAPs utilizing test range, or craft PCAPs utilizing software to use in both detection development and regression testing.

Qualification

Find out how your skills align with this job's requirements. If anything seems off, you can easily click on the tags to select or unselect skills to reflect your actual expertise.

Cyber SecurityThreat HuntingDetection DevelopmentOffensive OperationsThreat EmulationSecurity ResearchSecurity Tool DevelopmentPythonDevOpsNetwork Packet CapturesWiresharkNetwork MinerSuricataSIEM ToolsContainerized SolutionsLinuxWindows Command LineOpen-Source ResearchProblem-Solving Ability

Required

5+ years in cyber security related field; operations, threat hunting, detection development, offensive operations, threat emulation, security research, or security tool development

1+ year of development experience with python in a production DevOps environment

Experience with analysis of network packet captures (PCAPs) and traffic using tools such as Wireshark and Network Miner

Experience using Suricata, Wireshark/tshark for network packet capture (PCAPs) analysis, and SIEM tools

Familiarity with containerized solutions for debugging

A solid understanding of both Linux and windows command line tools for debugging

Strong ability to conduct open-source research