Fortra has an exciting opportunity on the Corporate Security team for a Sr. Security Engineer. This role will focus on identifying novel threats impacting Fortra and devising strategies to improve Fortra’s ability to quickly detect similar activity in the future and hunt for past activity. Professionals who have both strong technical skills and an analytic mindset will relish the challenge of discovering new ways to reliably pinpoint and eliminate adversary activity impacting Fortra and organizations across the world.  Working as part of a team, you will operate alongside Data Science, Security Analysts, Threat Intelligence, Security Engineering and other functions within Fortra that share the mission of keeping Fortra safe from cyber threats.

WHAT YOU’LL DO

• Actively research various types of cyber-attacks using active defense techniques, data analysis, and open-source intelligence gathering
• Assist in managing SIEM by helping to build detections, advanced analytics and automated responses
• Using triggers such as external threat indicators, current world events, or novel TTPs, devise strategies to identify previously undetected malicious activity                                  
• Help test security measures and identify gaps in logging or tooling by using various OST
• Conduct data analysis to identify notable cyber-criminal and APT trends
• Perform in threat hunting across a global network that employs various on-premise and cloud network architectures
• Knowledge of various types of cyber threats, threat groups, attack vectors, attacker tactics, and countermeasures
• Analyze threat actor communications to understand new tactics, techniques, and procedures (TTPs)

QUALIFICATIONS

• Experience managing a SIEM, consuming and integrating multiple threat intelligence feeds into corporate security products
• Ability to work independently and effectively as part of a remote team with minimal supervision
• Outstanding data analysis skills and experience with data analysis tools
• Strong analytical reasoning, problem solving, and decision-making skills
• Comfortable working with highly complex, globally connected hybrid information systems that incorporates multiple co-los, on-premise and cloud assets
• Passion for helping solve big problems and working with a wide variety of teams to make an impact
• Clear and concise communication skills (verbal and written)
• A detail-oriented and analytic mindset
• Experience with APIs and/or scripting languages
• Experience performing network forensics, analyzing PCAP data and strong understanding of networking protocols
• Experience capturing and analyzing digital forensics for various devices and operating systems
• Experience with OSINT, dark web and other sources of cyber-crime and APT related threat intelligence
• Ability to quickly digest raw intelligence and perform threat hunts based on intel

ID:2894