RIT Solutions, Inc.
MUST HAVES:
5+ years in general technical cybersecurity experience. 3+ years' experience in detection engineering, threat hunting, or incident response. Experience in operationalizing cyber threat intelligence into high-fidelity detection logic. Experience in systematically developing detection logic and adversarial TTP testing against said logic following formalized detection engineering lifecycle. Highly proficient in analyzing logs from various sources, such as endpoints, applications, network appliances, and cloud environments. Strong technical understanding of cybersecurity fundamentals at the network, protocol, and host levels. Experience with MITRE Telecommunication&CK and/or D3FEND frameworks. Strong experience with SIEM platforms. Ability to proactively and systematically hunt for threats using investigative tools, techniques, and user behavior analysis. Offensive security experience - conducting red team operations and/or penetration tests. DevOps experience and/or building/maintaining cloud environments using infrastructure as code. Strong ability to translate cyber and technical issues and topics into risk-informed business language.
5+ years in general technical cybersecurity experience. 3+ years' experience in detection engineering, threat hunting, or incident response. Experience in operationalizing cyber threat intelligence into high-fidelity detection logic. Experience in systematically developing detection logic and adversarial TTP testing against said logic following formalized detection engineering lifecycle. Highly proficient in analyzing logs from various sources, such as endpoints, applications, network appliances, and cloud environments. Strong technical understanding of cybersecurity fundamentals at the network, protocol, and host levels. Experience with MITRE Telecommunication&CK and/or D3FEND frameworks. Strong experience with SIEM platforms. Ability to proactively and systematically hunt for threats using investigative tools, techniques, and user behavior analysis. Offensive security experience - conducting red team operations and/or penetration tests. DevOps experience and/or building/maintaining cloud environments using infrastructure as code. Strong ability to translate cyber and technical issues and topics into risk-informed business language.