MixMode · 11 hours ago

Sr. Cybersecurity Engineer

United States

Full-time

Remote

Senior Level

$50/hr - $100/hr

Maximize your interview chances

Artificial Intelligence (AI)Big Data

Insider Connection @MixMode

Discover valuable connections within the company who might provide insights and potential referrals.
Get 3x more responses when you reach out via email instead of LinkedIn.

Responsibilities

Maintain continual posture of understanding, documenting and educating MixMode on the current threat landscape.

Research and discover emerging threats with a view towards helping craft MixMode's approach to detect these threats.

Work closely with AI Engineers to develop a next-generation AI model that can support Threat Hunters in the field.

Work closely with MixMode's AI Team to build realistic attack datasets that can be used to test and train MixMode's AI.

Work closely with the MixMode Product Management team to develop approaches to detection that align with the evolving threat landscape.

Performing threat-hunting activities on customer datasets to uncover malicious activity that can be published as CVEs and intel.

Ability to present findings at conferences or events on research and interesting items in cyber security.

Qualification

Find out how your skills align with this job's requirements. If anything seems off, you can easily click on the tags to select or unselect skills to reflect your actual expertise.

Cybersecurity researchThreat intelligenceIncident responsePacket capture analysisYARA rulesIDS signaturesLinux/Unix administrationWindows administrationPythonBashScrum methodologyAWSAzureGPCVMWareHyper-VMalware analysis

Required

Extensive experience in cybersecurity research, offensive and defensive capabilities, threat intelligence and/or incident response/reverse engineering.

Experience with multiple Open Source and proprietary threat feeds.

Prior published CVEs and/or threat actor attribution experience.

Packet capture analysis and decoding skills.

Experience developing intel and curating threat feeds, including IDS signatures, YARA rules, JA3 signatures, and traditional IOCs.

Deep understanding of Linux/unix and Windows from an administrative and threat model perspective.

Research experience for publishing detailed analysis of malware, tactics, techniques, and procedures of adversaries.

Familiarity with various cybersecurity exploitation tools and methodologies, common malware families, and antivirus evasion techniques.

Comfortable working with software development teams.

Experience working in python and bash.

Excellent communication skills: able to articulate technical knowledge without technical jargon.

Experience with Scrum methodology.

Experience working with public cloud environments (AWS, Azure, GPC etc.).