Senior Detection Engineer

About BeyondTrust

BeyondTrust is the worldwide leader in Privileged Access Management (PAM), empowering organizations to secure and manage their entire universe of privileges.  Our integrated products and platform offer the industry's most advanced PAM solution, enabling organizations to quickly shrink their attack surface across traditional, cloud, and hybrid environments. Learn more at  www.beyondtrust.com.

SUMMARY / OBJECTIVE:
As a Senior Detection Engineer you will work with a like-minded team that explore ideas, build detections and set the vision and designs for our product solutions. You will be challenged daily as the team tackles the hardest technology and security problems within the company.

WHAT YOU'LL DO:
- Define and deliver innovative solutions for detecting identity-based attacks using rule-based analytics, behavioral analytics, and machine learning.
- Provide technical leadership to support product and engineering teams developing threat detection and response capabilities.
- Design real-time detection blueprints and pipelines using various technologies such as Flink, Spark, EMR, etc.

SKILLS YOU NEED:
- Experience working and querying SIEM tools or other log-based data
- Experience in engineering event detection & response tuning
- Knowledge of MITRE ATT&CK framework and general adversarial / defensive security techniques
- Ability to engineer creative, scalable, and out-of-the-box solutions
- Up to date with engineering best practices, security technology trends, tools, and frameworks
- Experience in developing detections for attacker tactics, techniques, and procedures (TTPs)

TECHNOLOGIES YOU SHOULD KNOW:
- Required: Kafka, Lambda, Apache Flink, or other streaming detection technology
- Required: Elastic Query Language (EQL)
- Required: Python, Go, or similar programming language
- Required: SIEM tools and other log-based data (Elasticsearch, Splunk)
- Preferred: Knowledge of cloud technologies, virtualization, containers, service-mesh
- Preferred: Data modeling in PostgreSQL, Elasticsearch, or Cassandra.

We understand that the world of work is evolving and we are a company that prides itself on our adaptability and ability to provide an inclusive and flexible environment that embraces all team members regardless of whether they are based in one of our offices or at home.

BeyondTrust is an EEO/AA/Disability/Vets Employer and an equal opportunity employer, offering a competitive salary with excellent benefits. We welcome all candidate applications who meet the minimum qualifications listed above.

What truly makes BeyondTrust special are the people – people who keep the culture strong and make working here exciting, rewarding, and ultimately fun!

Search @beyondtrust and #beyondtrustlife on Twitter and LinkedIn to find out more.