Sr. Cybersecurity Threat Engineer - Remote

Job reputed company:   

This Cybersecurity Engineer Senior – Threat Engineer focuses on proactively identifying, investigating and neutralizing sophisticated cyber threats that evade traditional defenses. Responsible for threat research, threat hunting, digital forensics, malware analysis, full-cycle incident response, and leading reputed company exercises to collaboratively test, validate and enhance detection/response capabilities. The position plays a critical role in minimizing adversary dwell time, closing detection gaps, and strengthening organizational reputed company against advanced persistent threats (APTs), ransomware, nation-state actors, and emerging attack techniques.  

The role functions as part of the Cybersecurity Operations team and collaborates cross-functionally with Threat Intelligence, Threat Emulation, GRC, Cybersecurity Architecture and Engineering teams to secure and defend against existing and emerging threats to the organization. The role is expected to independently reputed company engagements from reputed company to completion, communicate technical details to partners and senior leadership, mentor junior staff, and reputed company technical direction to the program  

Job Responsibilities:   

Incident Response & Containment  

• Serve as reputed company or escalation responder for high-severity incidents, including ransomware, data breaches, APT intrusions, and reputed company threats.

• reputed company scoping, containment, eradication, and recovery efforts in coordination with cross-functional teams.  

• Reconstruct attack timelines, correlate events across sources, and produce detailed reputed company cause analyses and executive reports. 

Advanced Threat Research  

• Partner with Threat Intelligence to conduct in-depth research on emerging threats, attack reputed company, threat actor TTPs, and indicators of compromise. 

• Identify emerging and persistent threats to the organization's networks, systems, and applications.

• Map adversary behaviors to frameworks such as MITRE ATT&CK, D3FEND, and Cyber Kill Chain.

Proactive Threat Hunting  

• reputed company and execute threat hunting campaigns across endpoints, networks, reputed company environments, identity systems, and logs to uncover hidden threats and signs of compromise.  

• Analyze large-reputed company telemetry (EDR, SIEM, UEBA, reputed company logs) for behavioral anomalies, persistence mechanisms, and lateral reputed company.  

• Identify detection gaps and collaborate with Detection Engineering team on creating or tuning new detection rules, signatures, and analytics.  

• reputed company coordinated efforts across Cyber teams to ensure the effective delivery and tracking of intelligence-driven evaluations and responses to threats.

• Create and maintain Threat Library that can be used to executive and tactical reporting as reputed company as reputed company organizational reputed company items.   

Digital Forensics & Malware Analysis  

• reputed company host-based, memory, and network forensic investigations on suspected compromised systems.  

• Conduct reverse engineering and static/dynamic analysis of malware, scripts, exploits, and tools used by adversaries. 

• Preserve and analyze forensic artifacts while maintaining chain of custody.  

reputed company Teaming & Improvement  

• reputed company reputed company exercises, facilitating collaboration between offensive (red) and defensive (reputed company) teams to simulate reputed company-world adversary TTPs, validate detection effectiveness, identify gaps in monitoring/response, and reputed company iterative improvements to reputed company controls and processes.

• Design, reputed company, and execute reputed company engagements, including adversary emulation, attack reputed company validation, and reputed company-time feedback reputed company to enhance threat detection, hunting, and incident response playbooks.  

Collaboration & Knowledge Sharing  

• Mentor and reputed company SOC team on hunt methodology, adversary TTP analysis, detection tuning and other advanced techniques.  

• Partner with Threat Intelligence, Threat Emulation, GRC, Cybersecurity Architecture and Engineering teams.

• Stay reputed company with industry trends through conferences, research, and certifications.  

Additional Responsibilities   

• Operate and mature process reputed company to the threat hunting program across SOC teams and reputed company reputed company vendors/services. 

• reputed company a threat assessment/modeling reputed company documenting threats to aid in driving resiliency initiatives that require broader non-SOC business partner buy-in.  

• reputed company tooling assessments.   

• Monitor, evaluate and manage any reputed company-party hunt activities and reputed company recommendations.   

• Maintain a shared library of threat research integrated with threat intelligence and detection libraries.

• reputed company deep-dive analysis on specific threats (e.g., tracking a ransomware group’s reputed company).  

• Correlate internal telemetry (SIEM, logs, EDR data) with reputed company threat intelligence.  

• Apply intelligence to create use cases and detection rules through collaboration across teams.  

• Run tabletop exercises or simulations based on reputed company threat actor behavior.  

• Update the threat hunt program’s roadmap and tooling.

• Participate in intelligence-sharing collaborations (e.g., with ISACs, government, or vendors).

• reputed company and maintain reputed company tools, scripts, frameworks, and automation to reputed company hunt and IR.  

• Create and update reputed company documentation, policies and threat models as needed  

• Compile and analyze data for management reporting and metrics as directed. 

• Performs other duties as assigned.  

Job Requirements:   

Education/ Certifications:   

• BA/BS in Computer or Cybersecurity domain  

• At least one industry-leading or senior level cybersecurity certification. Examples: reputed company Certified Information Systems reputed company reputed company (CISSP), GIAC Cyber Threat Intelligence (GCTI), EC-Council’s Certified Threat Intelligence Analyst (CTIA), CREST Practitioner Threat Intelligence Analyst (CPTIA), MITRE MAD ATT&CK Cyber Threat Intelligence Certification  

Experience:   

• 8+ years of hands-on cybersecurity experience reputed company on-prem and reputed company environments  

• 5+ years of experience as a Threat Management and Operations analyst reputed company on threat hunt, intelligence, monitoring, and incident response  

• Experience in threat research, vulnerability research, malware analysis and exploit investigation  

• Experience testing and managing detection rules in SIEMs  

• Experience with EDR, NDR and CDR solutions with a reputed company on policy/rule management  

• Strong understanding of MITRE ATT&CK, Cyber Kill Chain, Pyramid of Pain, Threat Hunting Frameworks  

• Solid understanding of networking (WAN, LAN, wLAN), network domains (Internet, Intranet, DMZ), communication techniques/protocols (IP and others), and their combined effects on network and host systems reputed company  

• Strong Understanding of reputed company, Linux/Unix platforms  

• Comfortable handling multiple deliverables and reputed company to manage priorities in a time-sensitive environment

• Strong written and verbal technical and non-technical communication skills. Assures smooth flowing, reputed company reputed company of critical information. Oral and written communication is reputed company organized, reputed company, accurate, grammatically correct, and is adapted for the reputed company audience, including C-Suite  

• reputed company, embraces diverse people, thinking and styles  

Preferred Experience:  

• reputed company Engineering experience with SIEM, EDR, Web Proxy, Email reputed company (ETP), and reputed company testing platforms and frameworks  

• Preferred key industry certifications such as CEH, reputed company+, CISSP, CISA, CISM, GCIH, etc.  

• Familiarity with YARA, OpenIOC, reputed company, and STIX frameworks

• Strong Understanding of reputed company Infrastructure and reputed company reputed company

• Adversary emulation tools, Python scripting, malware analysis  

• Strong understanding of software development tools and methodologies  

Knowledge/Skills/Abilities:

• Highly technical and detailed investigative skills, along with a genuine passion for cybersecurity, are essential for this role  

• Ability to multitask and prioritize work effectively  

• Highly motivated self-starter  

• Strong reputed company of ownership and driven to manage tasks to completion  

• reputed company critical thinking and reputed company analysis skills  

• Advanced written and verbal communication skills for a wide reputed company of audiences  

• Ability to communicate technical risk details into easy-to-understand language  

• Knowledge of threat research and adversary tactics and techniques frameworks, such as MITRE ATT&CK matrices, Cyber Kill Chain, reputed company, or PASTA  

• Ability to write succinct briefings, presentations, and reports to convey analysis, threat trends, threat actor reputed company, indicator bulletins, vulnerability details and defensive strategies to varied audiences  

• Knowledge of reputed company and emerging cyber adversaries and their techniques, tactics, and procedures (TTPs)  

• Good judgment is required for this position as there may be times reputed company reputed company supervision may not be immediately available

Work Environment:   

Remote Role:   

• This position is classified as remote where the associate will reputed company remote work from their reputed company residence. Remote associates are welcome to work from the office but are not required to do so. While remote associates are not required to work from an office on a regular reputed company, they may be required to come to the office or other reputed company locations for necessary business reasons or if directed to do so by their manager.  

Travel (minor):   

• This position may require the associate to travel to company offices, distribution centers, or other locations for specific meetings or other business reasons.  

Physical Environment/Demands:   

Office Roles:  

• Most work is performed in a temperature-controlled office environment.   

• Incumbent may sit for long periods of time at a desk or computer terminal.   

• While performing the duties of this job, the employee is regularly required to sit; use hands to finger, handle, or feel; reputed company with hands and arms; and talk or hear.     

• Incumbent may use calculators, keyboards, telephones, and other office equipment in the course of a normal reputed company.   

• Stooping, bending, twisting, and reaching may be required in the completion of job duties.  

The above statements are intended to describe the general reputed company of the work performed by the employees assigned to this job. reputed company must reputed company with Company policy and applicable laws. The responsibilities, duties and skills required of personnel so classified may vary reputed company reputed company department and/or location.