As one of the most established cybersecurity companies in the world, we at NetWitness are dedicated to helping our customers and partners protect their organizations from cyberattacks. Our products and incident response services are used by large enterprises, governments, and militaries for incident response and threat hunting.
We are seeking a professional who leverages in-depth industry knowledge and technical solutions to assist customers in gaining market share and increasing operational efficiencies. The role involves providing technical and consultative leadership on complex engagements, focusing on specific industries or service offerings.
Responsibilities
- Provide technical and consultative services on NetWitness solutions across various complex projects, including workshops, requirements analysis, solution design, documentation, and training.
- Collaborate with project managers, team members, and clients to ensure smooth project execution from start to finish.
- Manage multiple work streams, define deliverables, and ensure projects adhere to methodologies, margins, and scope.
- Lead quality assurance activities and ensure proper escalation and change procedures are followed.
- Analyze requirements, propose solutions, and develop proposals addressing client needs.
- Manage or serve as the technical lead on projects, understanding customer challenges and providing strategic solutions.
- Analyze large data sets, produce documentation, and ensure client satisfaction through quality work products.
- Maintain activity reports, progress updates, and end-of-project documentation.
- Transfer knowledge and provide training during and after project completion.
- Create detailed project plans, validate statements of work, and categorize requirements.
Technical Responsibilities
- Assist customers in threat detection and hunting, tracking threat actors and TTPs.
- Contribute to cybersecurity best practices, focusing on threat intel, hunting, and analysis using NDR, EDR, and SIEM tools.
- Develop detection content, use cases, queries, alerts, dashboards, and reports to identify threats and anomalies.
- Assess visibility gaps and recommend improvements, collaborating with incident response teams.
- Support sales project scoping and provide technical guidance.
- Contribute to the development of NetWitness training courses, knowledge checks, and assessments.
- Participate in lab and content quality assurance, maintain instructor materials, and assist with lab deployments and upgrades.
- Deliver webinars and participate in public training events as needed.
Required Experience / Qualifications
- Understanding of logging mechanisms for network, security solutions, servers, and databases.
- Good knowledge of networking and security infrastructure.
- Strong communication, analytical, and problem-solving skills.
- Ability to differentiate logs, events, packets, and incidents.
- Knowledge of data collection methodologies like Syslog, SNMP, ODBC, LEA, FTP, SFTP.
- Awareness of current threats, security trends, and policies.
- Excellent presentation and interpersonal skills.
- Proficiency in English communication, both written and verbal.
- Federal security clearance may be advantageous.