MDR Security Analyst - Threat Hunting

We are seeking a highly energetic and talented security analyst to join Cato Networks' Managed Detection and Response (MDR) team. As an MDR security analyst, your primary responsibility will be to identify and respond to security threats across our service customers. You will utilize the groundbreaking Cato Threat Hunting System to proactively seek out unknown threats and enhance Cato Networks hunting capabilities. Leveraging the Cato Cloud data warehouse, you will develop threat hunting technics to effectively detect and address security threats. Moreover, you will serve as a trusted advisor to our MDR service clients, providing valuable insights into their security posture and the threat landscape they face

This position offers an exceptional opportunity for network security enthusiasts who are passionate about Network Security, Malware Analysis, Threat Hunting, and Threat Intelligence.

Responsibilities

• Act as a Customer Security Advisor, conducting threat-hunting activities and performing security assessments on customer networks. Effectively communicate findings, recommendations for remediation, and mitigation strategies to customers

• Serve as an escalation point for the SOC analysts, assisting in the investigation, analysis, and response to security incidents

• Develop cyber kill-chain indicators of an attack and hunting heuristics to enhance the ongoing threat-hunting process

• Enhance the product accuracy and its capacity to detect emerging threats within the dynamic security landscape

Requirements and skills

• Proven hands-on experience in the cybersecurity industry

• Excellent customer service skills

• Strong knowledge of networking architecture and protocols, including TCP/IP, DNS, SSL, SMB, HTTP, IP Routing, etc.

• Comprehensive understanding of the cybersecurity landscape, common threats, and attack scenarios, such as malware infections, command and control (C&C) communication, drive-by attacks, phishing, and network scans

• Practical experience with security technologies, including firewalls (FW), intrusion prevention systems/intrusion detection systems (IPS/IDS), antivirus (AV), security information and event management (SIEM) systems, endpoint protection, and network forensics tools

• Analytical mindset, capable of formulating hypotheses and validating them through in-depth analysis and technical evidence

• Fluent in English with exceptional communication skills

• Proficiency in at least one scripting language such as Python or Ruby

• Advantageous: Experience with Extended Detection and Response (XDR) solutions

• Advantageous: Previous experience working in Managed Security Service Provider (MSSP) or Managed Detection and Response (MDR) providers as a Threat Hunter or Security Analyst

• Ability to work effectively as a team player, demonstrating responsibility and strong organizational skills

Education

• Advantage – BSc. in Computer Science, Information technology, Mathematics or similar