As a, you will spearhead the proactive identification and mitigation of advanced threats within our digital environment. Working closely with the CSIRT Incident Response team as a senior Cyber Threat Hunter, you'll delve deep into system, application, network, cloud, and security tooling logs in search of signs of adversary activities. Your expertise in leveraging state-of-the-art tools will be instrumental in fortifying Dell Technologies against emerging threats. Moreover, you will collaborate with various internal teams, sharing crucial insights and findings, and ensuring a unified and agile response to a wide variety of cyber threats.
You will:
Proactively hunt for cyber threats across our systems, endpoints, applications, networks, and multi-cloud environments
Utilize advanced analytical techniques to detect anomalies and patterns indicative of malicious activities ranging from opportunistic actors to advanced persistent nation-state threats
Effectively collaborate with numerous teams across Dell as a cyber threat hunting subject matter expert to share insights and refine our detection and response mechanisms, deliver detailed assessments based on your hunts, and provide guidance on enhancing our security posture
Provide expert investigative support of large scale and complex security incidents
Mentor teammates, guiding their professional development
10-12 years of proven expertise in cyber threat hunting or similar experience across diverse environments
Proficiency in various security tools such as SIEM, EDR, and UEBA
Demonstrated experience in network, cloud, and/or host-based intrusion analysis; malware analysis and/or digital forensics skills are a plus
Knowledge of and experience with standard network logging formats, network management systems and network security monitoring systems, security information and event management, network packet analysis tools and forensic analysis tools
Knowledge of and experience with web proxy, firewalls, IPS, IDS, mail content scanning appliances, enterprise Antivirus solutions, network analyzers, and domain name servers
Desirable Requirements
Deep technical knowledge of adversarial attack methods, tools, and technologies
Strong understanding of the MITRE ATT&CK knowledge base, the Cyber Kill Chain, and the Diamond Model
Self-initiative and ability to successfully manage your time to meet the various role demands with minimal oversight
משרות נוספות שיכולות לעניין אותך