Senior Threat Detection Researcher — Hybrid & Cloud

vectranetworks; Stati Uniti; Ibrido; USD 150.000 - 230.000; Tempo pieno

Vantaggi offerti da questo lavoro

Health care coverage

Income protection and life insurance

Retirement savings access

Behavioral and emotional wellness

Generous time-off programs

Employee recognition program

Descrizione del lavoro

vectranetworks seeks a senior security researcher to lead offensive security efforts for hybrid and multi-cloud enterprise networks. You will drive discovery, modeling, and validation of detection capabilities, blending hands-on research with data-science collaboration.

In this role you will investigate attacker TTPs, develop production-ready detection logic, and collaborate with data science engineers to ship high-fidelity models.

Competenze

• 5+ years of experience in offensive security (penetration testing on networks) or equivalent in security research, malware analysis, or incident response.
• Familiarity with corporate investigation workflows, incident response processes, and modern malware detection and mitigation technologies.
• Proficiency in Python scripting and strong analytical, troubleshooting, and problem-solving skills.
• Experience with offensive security frameworks such as Cobalt Strike, Metasploit, Empire, Mimikatz, impacket, and CrackMapExec.
• Deep knowledge of networking concepts (TCP/IP, UDP, HTTP, TLS, FTP, RPC, DNS, SMB, Kerberos) and hands-on use of traffic analysis tools like Wireshark and tcpdump.
• Demonstrated self-direction in a remote work setting with clear written and verbal communication skills.

Mansioni

• Investigate adversary TTPs and translate findings into new network- and cloud-based detection logic.
• Perform systems analysis, APT modeling, protocol analysis, and tooling assessments against hybrid attack surfaces.
• Partner with data science engineers to design, build, and refine detection models for production.
• Replicate attacker tooling in labs to produce high-fidelity samples for detection development and validation.
• Run ongoing efficacy testing, document results, and recommend remediations for internal use.
• Communicate attacker-centric perspectives to customers and educate them on observed threats.

Conoscenze

5+ years experience

Python scripting

attack surface modeling

remote work communication

analytical problem solving

Strumenti

Cobalt Strike

Metasploit

Empire

Mimikatz

impacket

CrackMapExec

Wireshark

tcpdump

Descrizione del lavoro

vectranetworks seeks a senior security researcher to lead offensive security efforts for hybrid and multi-cloud enterprise networks. You will drive discovery, modeling, and validation of detection capabilities, blending hands-on research with data-science collaboration.

In this role you will investigate attacker TTPs, develop production-ready detection logic, and collaborate with data science engineers to ship high-fidelity models.