Integrity360 is one of Europe's leading cyber security specialists operating from office locations spread out across Europe, providing a comprehensive range of professional, support and managed cyber security services for our 300+ clients. Our services include Managed Security, Cyber Security Testing, Incident Response, Security Integration, PCI Compliance and Cyber Risk & Assurance services.
The company was founded with a focus on technical expertise and that philosophy remains today. The role of Threat Content Developer provides the successful candidate with an opportunity to develop & enhance Integrity360's threat detection capabilities across Managed Detection & Response (MDR) service lines.
Working alongside teams including Incident Response, Cyber Threat Intelligence, and Integrity360's Cyber Security Operations Centre (CSOC), the successful applicant will translate intelligence concerning adversary activity into detection capabilities which guide actionable investigations of real time threats.
Considering Integrity360's existing use case catalogue, you will help to identify and close gaps in coverage, continually improving detective capabilities with proactive and reactive additions to Integrity360's overall threat content roadmap.
Ongoing analysis of various threat intelligence forms, tracking adversary activity in the context of adversary groups, campaigns, and software.
Tracking emerging threats, such as 0-day exploits published for popular software used across the Integrity360 customer base.
Continuous deployment of detection analytics (predominantly to SIEM), designed to detect any threats or risks identified during threat intelligence reviews.
Contribute to the development of new tools used within the Threat Content Development team, typically leveraging automation to minimize delivery times and maximize intelligence integrations.
Qualifications / Qualities :
3+ years hands-on technical experience within an IT security related position, such as Detection Engineer, DevSecOps Engineer, Network Security Engineer, Cyber Security Engineer, Information Security Engineer, etc.
Strong, low-level understanding of networking principles, operating systems, and software design practices.
Familiar with commonly adopted cloud technologies across different vendors (e.g. Azure, AWS, GCP).
Python, PowerShell, Bash, etc.
Experience working with one or more popular CI / CD tool, such as Azure DevOps or GitLab Runner, familiar with tools such as git.
#J-18808-Ljbffr