Threat Hunter
vor 2 Monaten
The Rapid7 Managed Services Threat Hunting team is responsible for performing proactive, hypothesis-driven threat hunts across all Managed Detection and Response (MDR) customers to identify emerging cyber threats and malicious activity on networks and systems.
The Threat Hunter will work proactively to uncover malicious activity that may have been missed by traditional security measures, and will develop strategies to mitigate current and future threats.
This role leverages internal and open source tools to accomplish threat hunting at scale.
The Threat Hunting team is also responsible for coordinating closely with Rapid7's Emergent Threat Response (ETR) program and working closely with related cross-functional teams.
About the Team
Rapid7's Managed Detection and Response (MDR) team is built from the ground up to bring motivated and passionate security talent face to face with emerging threats, practical challenges, and evil at scale.
Our MDR service uses an impact-driven mindset to focus efforts on effective solutions, encouraging personal and technical innovation within the SOC.
MDR provides 24/7/365 monitoring, threat hunting, incident response, and more with a focus on endpoint detection and behavioral intelligence.
About the Role
Rapid7's Threat Hunters are tenacious individuals who enjoy analyzing threats and trends, both novel and tried-and-true, and using their heads to craft hypotheses that lead them on the hunt for the proverbial needle-in-a-haystack.
The day-to-day of a Threat Hunter may include conducting research on threat actor Tactics, Techniques, and Procedures (TTPs), determining what types of activities may be worthy of hunting for, and formulating the best method by which to dig through customers' data in order to identify evidence of said TTPs; or, in the case of the swell-up of events qualifying for Rapid7's Emergent Threat Response, assisting teams across Rapid7 in identifying ways to search for and notify customers of the next big evil thing that could be sitting right on their doorstep, waiting to pounce.
Hunters may derive hypotheses that are worthy of conducting broad-scale hunts across the entire MDR customer base, or they may target specific customer environments or industry verticals to sniff out compromises new or old.
Threat Hunters pay close attention to the activities observed in Incident Response engagements, identifying TTPs and Indicators of Compromise/Attack (IOCs/IOAs) that may be worth searching for in other customer environments, and glean insights from the Threat Intelligence and Detection Engineering (TIDE) team's latest and greatest detections to help craft hypotheticals potentially worthy of the hunt.
Threat Hunters also have the unique opportunity to work directly with the minds behind Rapid7's industry-leading open-source DFIR tool, Velociraptor, crafting new hunt packages and contributing directly back to the cybersecurity community.
In this role, you will:
Conduct ongoing hypothesis-based threat hunts utilizing new TTPs and IOCs/IOAs, discovered through proactive research as well as collaboration with other teams within the organization Serve as a core component of the Rapid7 ETR team to provide expertise and conduct hunts based on classified emerging threats across MDR customers Conduct targeted hunts during major incidents based on past attacker activity and Incident Manager direction Help document and improve hunting processes, tools, and capabilities Develop new Velociraptor hunt packages based on research and findings Work closely with engineering, endpoint, TIDE, Rapid7 Labs, and Velociraptor teams to prioritize roadmap items that improve threat hunting capabilities Provide timely reporting and feedback to stakeholders When applicable, publish threat hunting topics to the Rapid7 blog The skills you'll bring include:
2+ years in a DFIR role, primarily focused on endpoint forensics Broad knowledge of threat actor groups and their TTPs Experience with SIEM platforms and querying/analyzing large data sets Ability to work with minimal oversight and prioritize efficiently Strong analytical and research skills Ability to think creatively and intuitively Differentiators:
SANS FOR508 or FOR608 (or similar) and/or associated certifications (GCFA, GEIR, etc.)
Experience conducting targeted threat hunting LEQL experience Experience with Velociraptor AWS Athena familiarity Experience with the InsightIDR SIEM/XDR platform Coding, engineering, and/or development experience Data science and/or AI experience We know that the best ideas and solutions come from multi-dimensional teams.
That's because these teams reflect a variety of backgrounds and professional experiences.
If you are excited about this role and feel your experience can make an impact, please don't be shy - apply today.
About Rapid7
At Rapid7, we are on a mission to create a secure digital world for our customers, our industry, and our communities.
We do this by embracing tenacity, passion, and collaboration to challenge what's possible and drive extraordinary impact.
Here, we're building a dynamic workplace where everyone can have the career experience of a lifetime.
We challenge ourselves to grow to our full potential.
We learn from our missteps and celebrate our victories.
We come to work every day to push boundaries in cybersecurity and keep our 10,000 global customers ahead of whatever's next.
Join us and bring your unique experiences and perspectives to tackle some of the world's biggest security challenges.
#J-18808-Ljbffr
-
Threat Hunter
vor 2 Monaten
Melbourne, Österreich Divvy Cloud Corp. VollzeitThe Rapid7 Managed Services Threat Hunting team is responsible for performing proactive, hypothesis-driven threat hunts across all Managed Detection and Response (MDR) customers to identify emerging cyber threats and malicious activity on networks and systems.The Threat Hunter will work proactively to uncover malicious activity that may have been missed by...
-
Senior Soc Specialist
vor 1 Monat
Melbourne, Österreich Marcus Lavalle-Smith - Cyber Security VollzeitCalling the Threat Hunters, Incident Responders and Detection Specialists….If you're passionate about both hunting and responding with experience in both (Or very strong experience in one) we would love to chat to you.This is a chance to work in an advanced SOC environment with a highly skilled team offering continuous training, new technologies and new...
-
Senior Soc Specialist
vor 1 Monat
Melbourne, Österreich Marcus Lavalle-Smith - Cyber Security VollzeitCalling the Threat Hunters, Incident Responders, and Detection Specialists! If you're passionate about both hunting and responding with experience in both (or very strong experience in one), we would love to chat with you.This is a chance to work in an advanced SOC environment with a highly skilled team offering continuous training, new technologies, and new...
-
Pre-Sales Support
vor 6 Stunden
Melbourne, Österreich Sentinelone VollzeitSentinelOne | Work where your voice is heard and your work is recognized.Defeating Every Attack.Every Second.Every Day.Antivirus is dead.To combat the attacks of today and tomorrow, we built a patented autonomous AI platform that prevents, detects, responds, and hunts in realtime.We believe stopping breaches is simply too late.Our team of global...
-
Sr Lead Information Security Engineer
vor 3 Monaten
Melbourne, Österreich Lumen Argentina VollzeitAbout Lumen Lumen connects the world.We are igniting business growth by connecting people, data and applications – quickly, securely, and effortlessly.Together, we are building a culture and company from the people up – committed to teamwork, trust and transparency.People power progress.Lumen's commitment to workplace inclusion and employee support...
-
Senior Consultant
vor 3 Monaten
Melbourne, Österreich Tideri Jobbörse VollzeitSenior Consultant - Security Operations Analyst - Level 3 - Cyber Security What if your most rewarding experiences couldn't be captured by a resume?At EY we believe that whoever you are, your uniqueness helps us stand apart.We bring together extraordinary people, like you, to build a better working world.What's in it for you?As a Level 3 Security Analyst,...
-
Melbourne, Österreich Tideri Jobbörse VollzeitLocation: Melbourne Requisition ID: 1545597 What if your most rewarding experiences couldn't be captured by a resume?At EY we believe that whoever you are, your uniqueness helps us stand apart.We bring together extraordinary people, like you, to build a better working world.What's in it for you?As a Level 3 Security Analyst , you will play a vital role in...
-
Security Analyst, Csirt
vor 2 Wochen
Melbourne, Österreich Salesforce, Inc. VollzeitSalesforce has one of the best Information Security teams in the world and growing this piece of the business is a top priority!Our Information Security teams work hand in hand with the business to ensure the highest security around all of our applications and infrastructure.CSIRT is a geographically distributed team, responsible for 24x7x365 security...
-
Senior Soc Specialist
Vor 5 Tagen
Melbourne, Österreich Marcus Lavalle-Smith - Cyber Security VollzeitCalling the Threat Hunters, Incident Responders and Detection Specialists….If you're passionate about both hunting and responding with experience in both (Or very strong experience in one) we would love to chat to you.Part of the is an L3 Incident Response escalation role and requires experience at this level.You will need to be based in Australia with PR...
-
Senior Soc Specialist
Vor 6 Tagen
Melbourne, Österreich Marcus Lavalle-Smith - Cyber Security VollzeitAdd expected salary to your profile for insights.Calling the Threat Hunters, Incident Responders, and Detection Specialists! If you're passionate about both hunting and responding with experience in both (or very strong experience in one), we would love to chat with you.This is an L3 Incident Response escalation role and requires experience at this level....
-
Cyber Detection
Vor 5 Tagen
Melbourne, Österreich Buscojobs VollzeitJob no : 494216Work type : Permanent full timeLocation : Perth CBDCategories : Cyber Security Flexibility with hours and work-from-home optionsFully Subsidised Corporate Gold Health Cover for you and your family13 days personal leave per yearAccess to corporate discounts across a range of retail, restaurants, and hotelsOpen to candidates from Perth, Western...
-
Hbf Health | Cyber Detection
Vor 2 Tagen
Melbourne, Österreich Buscojobs VollzeitJob no : 494216 Work type : Permanent full time Location : Perth CBD Categories : Cyber Security Flexibility with hours and work-from-home options Fully Subsidised Corporate Gold Health Cover for you and your family 13 days personal leave per year Access to corporate discounts across a range of retail, restaurants, and hotels Open to candidates from Perth,...
-
Accenture | Primary Technical Incident Response Lead
vor 3 Wochen
Melbourne, Österreich Tideri Jobbörse VollzeitPrimary Technical Incident Response Lead (Cyber Response Team) Australia As the Cyber Response Primary Technical Lead at Accenture, you will be responsible for leading our technical response to cybersecurity incidents.You will play a crucial role in guiding and coordinating incident response efforts, conducting detailed forensic analysis, and implementing...
-
Cyber Security Consultant
Vor 4 Tagen
Melbourne, Österreich Jacobs VollzeitCyber Security Consultant | Jacobs | Australia Seeking experienced Cyber Security candidates to work on exciting projects that will shape the future of the Australian Defence Force. Tell me about this role:We are currently looking for multiple Cyber Security professionals to join our teams across a number of disciplines.These roles will work in a...
-
Cyber Security Specialist
vor 3 Wochen
Melbourne, Österreich Australia Post VollzeitHelp us deliver like never before? We're looking for a Cyber Security Specialist to join our diverse, talented and innovative digital technology team who together are helping our customers and communities build a better future.Together, we design, build and maintain products, services and experiences that Australian's love and trust, while delivering a...
-
Cyber Security Specialist
vor 3 Wochen
Melbourne, Österreich Australia Post VollzeitHelp us deliver like never before? We're looking for a Cyber Security Specialist to join our diverse, talented and innovative digital technology team who together are helping our customers and communities build a better future.Together, we design, build and maintain products, services and experiences that Australian's love and trust, while delivering a...
-
Enterprise Account Executive, Sydney
Vor 5 Tagen
Melbourne, Österreich Buscojobs VollzeitPosted Tuesday, October 22, 2024 at 5:00 PM | Expires Friday, January 31, 2025 at 4:59 PMAbout Trustwave Trustwave is a leading cybersecurity and managed security services provider focused on threat detection and response.We uncover threats that others can't and respond quicker than others can to protect against the devastating impacts of cyberattacks.We're...
-
Accenture | Senior Incident Response Lead
vor 3 Wochen
Melbourne, Österreich Tideri Jobbörse VollzeitSenior Incident Response Lead - Australia / New Zealand Senior Incident Response Team Member is a highly skilled position within Accenture's Global Cyber Response team.You will be working closely with technical leads to conduct independent investigations and proactive engagements.Key Responsibilities Perform digital forensics and incident response...
-
Trustwave | Enterprise Account Executive, Sydney
Vor 6 Tagen
Melbourne, Österreich Buscojobs VollzeitPosted Tuesday, October 22, 2024 at 5 : 00 PM | Expires Friday, January 31, 2025 at 4 : 59 PMAbout Trustwave Trustwave is a leading cybersecurity and managed security services provider focused on threat detection and response.We uncover threats that others can't and respond quicker than others can to protect against the devastating impacts of...
-
Security Analyst, Csirt
Vor 5 Tagen
Melbourne, Österreich Salesforce, Inc. VollzeitAssociate Incident Responder, CSIRT Apply remote type Office - Flexible locations Australia - Sydney Australia - Canberra Australia - Melbourne Australia - Brisbane time type Full time posted on Posted Yesterday job requisition id JR276752 To get the best candidate experience, please consider applying for a maximum of 3 roles within 12 months to ensure you...
