Detection & Response Engineer

View full description

Requirements:

• 1+ years of experience with detection and response tools, particularly EDR, NSM, and SIEM.
• 1+ years of experience writing, deploying and tuning custom detections based on research or investigative work.
• Proficiency in Python, Go, or other object-oriented programming languages.
• Strong understanding of Windows, macOS, and Linux operating systems and command line tools.
• Knowledge of networking basics, such as TCP/IP and OSI model.
• Working knowledge of attack vectors, threat tactics, and attacker techniques.
• Understanding of cloud infrastructure platforms and their IAM models.
• Bachelor’s degree in Computer Science or Information Security strongly preferred.
• 3+ years of professional experience in information technology or security operations would be ideal but not required.

Responsibilities:

• Implement, maintain and iteratively improve Expel's ability to detect and investigate threats using integrated technologies.
• Contribute to the growth of Expel’s detection strategy through creating detections for the proprietary rule engine.
• Maintain documentation supporting detection and response content.
• Automate investigative workflows using an orchestration framework written in Python.
• Design detection and response solutions using technology APIs to improve value and efficiency in Expel’s Workbench platform.
• Participate in the team’s research and monitoring of the latest threat landscape.