Blue Team Engineer
Turkey
Picus
The Complete Security Validation Platform | Stay proactive by validating your security controls with attack scenarios, empower your Red, Purple, Blue teams.What You’ll Do
- Analyze, understand and use public research about current cyber threats and detection methods/tools
- Deploy, configure, and maintain security technologies, including NG Firewalls, IPS, WAF, EDR, XDR, SOAR, SIEM, and DLP solutions to assess each of the cybersecurity technology’s responses to Picus Attacks
- Develop open-source and vendor based threat detection scenarios
- Develop tooling for Detection Development Life-Cycle
- Research on new threat hunting methodologies, tools, and technologies
- Onboard and maintain detection and hunting products (SIEM, EDR, etc.)
- Manage and maintain internal SOC technologies and processes
- Effectively use threat intelligence services and malware sandboxes for hunting new malware threats
- Work with Picus Labs Red Team on purple teaming
- Work with engineering teams on the development of new product features
What You Have
- Hands-on experience in hunting current adversarial techniques
- Strong threat detection and hunting knowledge
- Strong SIGMA and YARA rule development knowledge
- Hands-on experience in administering and using network security, SIEM, SOAR, XDR and EDR technologies
- Willingness to improve in defensive tooling
- Knowledge of Mitre ATT&CK framework and threat intelligence services
- Community contribution to defensive knowledge will be a plus. (Open source projects, etc.)
- Proficiency in written English
* Salary range is an estimate based on our InfoSec / Cybersecurity Salary Index 💰
Tags: Blue team EDR Firewalls IPS Malware MITRE ATT&CK Network security Open Source Red team Risk management SIEM SOAR SOC Threat detection Threat intelligence
Perks/benefits: Career development Startup environment
More jobs like this
Explore more InfoSec / Cybersecurity career opportunities
Find even more open roles in Ethical Hacking, Pen Testing, Security Engineering, Threat Research, Vulnerability Management, Cryptography, Digital Forensics and Cyber Security in general - ordered by popularity of job title or skills, toolset and products used - below.
- Open Analyste CERT / Incident Responder junior (H/F) jobs
- Open SOC Analyst jobs
- Open Senior Cybersecurity Engineer jobs
- Open Analyste CERT / Incident Responder senior (H/F) jobs
- Open Electronic Warfare Advanced Tactical Trainer jobs
- Open IT Security Analyst jobs
- Open Information Security Officer jobs
- Open Senior Information Security Engineer jobs
- Open Consultant SOC / CERT H/F jobs
- Open Cyber Security Specialist jobs
- Open Consultant infrastructure sécurité H/F jobs
- Open Information Systems Security Officer (ISSO) jobs
- Open Security Operations Engineer jobs
- Open Staff Product Security Engineer jobs
- Open Senior SOC Analyst jobs
- Open Product Security Engineer jobs
- Open Staff Security Engineer jobs
- Open Staff Information Security Engineer jobs
- Open o365 Security Architect jobs
- Open Infosec Risk Manager jobs
- Open Cybersecurity Consultant jobs
- Open Chief Information Security Officer jobs
- Open Fortinet Firewall Engineer jobs
- Open Cyber Security Architect jobs
- Open Ingénieur DevSecops H/F jobs
- Open Application security-related jobs
- Open Risk assessment-related jobs
- Open Network security-related jobs
- Open SaaS-related jobs
- Open Governance-related jobs
- Open Pentesting-related jobs
- Open Java-related jobs
- Open Analytics-related jobs
- Open ISO 27001-related jobs
- Open Clearance-related jobs
- Open Vulnerability management-related jobs
- Open CISM-related jobs
- Open Security assessment-related jobs
- Open DevOps-related jobs
- Open APIs-related jobs
- Open IAM-related jobs
- Open Threat intelligence-related jobs
- Open Malware-related jobs
- Open Splunk-related jobs
- Open Kubernetes-related jobs
- Open CISA-related jobs
- Open DevSecOps-related jobs
- Open Terraform-related jobs
- Open IDS-related jobs
- Open GDPR-related jobs