Applied Security Researcher at Aon Boston, MA

Downtown Boulder Partnership; Boston (MA); On-site; USD 120,000 - 160,000; Full time

Benefits offered by this job

401(k) with employer contributions

Employee stock purchase plan

Health, dental, and vision insurance

Paid time off including holidays and/v

Disability coverage

Job summary

Aon’s Applied Security Researcher role sits within the Proactive Threat Operations (PTO) team, supporting the Cybersecurity Operations Lead and the Proactive Threat Operations Team Lead in strengthening security posture.

The position involves researching emerging threats, analyzing data and threats, developing detections and playbooks, and collaborating across teams to improve incident response and threat hunting capabilities.

Qualifications

• 5 years experience in cyber security operations, information technology, threat intelligence, and incident response.
• Hands on technical experience with threat intelligence data, analysis, and incident response.
• Experience in threat hunting, security data analysis, developing security tools and playbooks.

Responsibilities

• Conduct in-depth research on emerging cyber threats, attack vectors, and security vulnerabilities.
• Analyze malware, exploit kits, and other malicious tools to understand their behavior and develop countermeasures.
• Develop and maintain threat intelligence feeds and tooling.
• Collaborate with cross-functional teams to support incident response and threat hunting activities.
• Create and curate signals/detections to enhance threat detection capabilities.
• Engineer tactical solutions to address immediate security needs and incidents.

Skills

Threat hunting

Security data analysis

Developing security tools

Playbooks development

Education

Bachelor's degree preferred in computer science or related fields

Tools

SIEM

EDR

Threat intelligence platforms

Scripting & automation

DevOps principles

Detection as code

Job description

Applied Security Researcher

Applied Security Researcher is a key role within the Proactive Threat Operations (PTO) team at Aon, supporting the Cybersecurity Operations Lead and the Proactive Threat Operations Team Lead.

Responsibilities

• Conduct in-depth research on emerging cyber threats, attack vectors, and security vulnerabilities.
• Conduct research and analysis on unique data sets to enhance security operations within Aon.
• Analyze malware, exploit kits, and other malicious tools to understand their behavior and develop countermeasures.
• Gather and analyze intelligence from multiple sources to identify potential threats.
• Produce detailed tactical intelligence reports and threat assessments for decision-makers.
• Develop and maintain threat intelligence feeds and tooling.
• Operationalize threat intelligence information to improve Aon security operations and posture.
• Participate in proactive threat hunting for potential threats and indicators of compromise within the network.
• Utilize multiple data sets to threat hunt and develop signals on techniques to uncover malicious activity.
• Develop hypotheses and threat hunting playbooks based on emerging threats.
• Assist Aon in incident response activities, providing technical expertise and support during investigations.
• Collaborate with the Proactive Threat Operations team, Aon AC3, and other cybersecurity teams to support incident response efforts and activities.
• Collaborate and initiate Red Team and Purple Team efforts within Aon.
• Perform data analysis to identify patterns and indicators of compromise.
• Create and curate signals/detections to enhance threat detection capabilities.
• Assist in the day-to-day security operations by developing and implementing security tools and technologies.
• Engineer tactical solutions to address immediate security needs and incidents.
• Collaborate with Aon security operations teams to integrate new security technologies and tools into the existing infrastructure.
• Provide technical support for ongoing security operations.

Qualifications

• 5 years experience in cyber security operations, information technology, threat intelligence, and incident response.
• Hands on technical experience with threat intelligence data, analysis, and incident response.
• Experience in threat hunting, security data analysis, developing security tools and playbooks.

Technical Skills

• Proficiency in security tools and technologies - SIEM, EDR, and threat intelligence platforms.
• Familiarity with scripting and automation to enhance security operations.
• Experience with detection as code and DevOps principles.

Other

• Excellent written and verbal communication skills, with the ability to produce detailed reports and threat assessments.
• Experience working in a collaborative environment with cross-functional teams.

Education

Bachelor’s degree preferred in computer science or related fields. Preferred certifications: CISSP, CEH, GREM, GCFA.

Benefits

In addition to a comprehensive benefits package, Aon offers a 401(k) savings plan with employer contributions; an employee stock purchase plan; health, dental, and vision insurance; paid time off including 12 paid holidays and 15 days of paid vacation; short-term and optional long-term disability; health savings account; and other employee benefits. All benefits are governed by standard plan documents and policies.

Equal Employment Opportunity

Aon provides equal employment opportunities to all employees and applicants for employment without regard to race, color, religion, creed, sex, sexual orientation, gender identity, national origin, age, disability, veteran, marital, domestic partner status, or other legally protected status. People with criminal histories are encouraged to apply.

We welcome applications from all and provide individuals with disabilities with reasonable adjustments to participate in the job application, interview process and to perform essential job functions once onboard. If you would like to learn more about the reasonable accommodations we provide, email [e-mail].

For positions in San Francisco and Los Angeles, we will consider for employment qualified applicants with arrest and conviction record in accordance with local Fair Chance ordinances.

Nothing in this job description restricts management's right to assign or reassign duties and responsibilities to this job at any time.