Senior Phishing & Threat Analytics Engineer

Apex Systems; Charlotte (NC); On-site; USD 85,411 - 89,544; Full time

Benefits offered by this job

Benefits package

401K plan

ESPP

Job summary

Everforth Apex Systems in Charlotte, NC is seeking a Cyber Security Research Engineer focusing on phishing, threat analytics, and incident response. You will research, detect, disrupt phishing campaigns, and collaborate across Threat Analytics, Threat Intelligence, and Security Operations to strengthen defenses.

The role requires hands-on experience with SIEM, EDR/IDS, log analysis, and crafting detection logic using Regular Expressions and YARA rules.

Qualifications

• 4+ years of Cyber Security Research experience or equivalent demonstrated through work experience, military experience, education, or training.
• Advanced Information Security technical skills.
• Experience detecting, investigating, and disrupting phishing attacks targeting employees, customers, or enterprise brands.

Responsibilities

• Phishing Detection & Threat Analytics: Develop and enhance detection logic, review security logs, create detection content (Regular Expressions, YARA Rules, Threat Detection Logic).
• Incident Response & Digital Forensics: Lead or participate in incident response activities and post-incident investigations.
• Threat Hunting & Offensive Security Research: Apply adversarial thinking, develop hunting strategies, research TTPs.

Skills

Phishing detection

Threat analytics

Incident response

Threat hunting

Adversary emulation

Security analytics

IOC analysis

Data analysis

Tools

SIEM platforms

IDS/IPS

Endpoint security

Email security gateways

Web security gateways

YARA rules

Regular expressions

Job description

Everforth Apex Systems in Charlotte, NC is seeking a Cyber Security Research Engineer focusing on phishing, threat analytics, and incident response. You will research, detect, disrupt phishing campaigns, and collaborate across Threat Analytics, Threat Intelligence, and Security Operations to strengthen defenses.

The role requires hands-on experience with SIEM, EDR/IDS, log analysis, and crafting detection logic using Regular Expressions and YARA rules.