Responsibilities

• We are looking for an experienced Detection Engineer to help secure our customers’ Apple devices by reverse engineering malware, exploring and implementing mitigations and detections.
• As a Detection Engineer, you will participate in Kandji’s detection strategy, creation, tuning, validation, and correlation to ensure that Kandji’s customers have effective detections in place. As a member of the threat intelligence team, Detection Engineers perform a wide array of tasks in an effort to increase alert fidelity, reduce false positives, and better inform Security Researchers within their team.
• The role will require that you both understand the nature of a threat and imagine some ways to enhance our detection engines or develop a new prototype to block it. Detection Engineers are responsible for Framework Mapping (MITRE, CIS, etc), Detection Creation, and Detection Effectiveness (Tuning, Validation, etc.)

Qualifications

• Detection Creation, and Detection Effectiveness (Tuning, Validation, etc.)
• 3+ Years of Cybersecurity Experience
• Vulnerability Research experience
• Tremendous attention to detail
• Minimum of 1 year of experience in malware analysis and/or reverse engineering (either academic or industry)
• Understanding of the modern threat landscape, including current exploits, primitives, and trends
• Experience Performing Signature Development
• Knowledge of security frameworks such as MITRE ATT&CK
• Excellent communication skills
• The ability to listen, adapt and influence are essentials
• Familiarity with Git, Jira, and Confluence tool-stacks

Nice-to-haves

• 1+ Years of SOC Analyst Cybersecurity Experience
• Experience in malicious binary analysis
• Experience in malicious document analysis
• Experience in malicious scripts analysis
• Knowledge within machine learning
• Strong knowledge and experience in facilitation, continuous improvement, empowerment, transparency, and empathy
• Demonstrated leadership and mentoring skills
• Excellent communication skills, both verbal and written, with the ability to properly translate and articulate positioning and technology