Skip to main content

PLEASE NOTE: We are dedicated to the safety of our team members, customers and candidates. Due to the current global situation you may experience a slower response time or fluctuation in our job opportunities as we adjust to the dynamic circumstances. We appreciate your patience and encourage you to Join our Talent Network for the latest Dell Technologies career opportunities.

To learn more about how Dell Technologies is supporting our communities, customers, partners and team members, please visit our COVID-19 response site.

Senior Security Researcher - Cloud - Secureworks - Remote

Primary Location: Atlanta, Georgia
Additional Location(s): Annapolis Junction, Maryland

Apply Now

Senior Security Researcher - Cloud - Secureworks - Remote

Secureworks® (NASDAQ: SCWX) is a technology-driven cybersecurity leader that protects organizations in the digitally connected world. Built on proprietary technologies and world-class threat intelligence, our applications and solutions help prevent, detect, and respond to cyber threats.  Red Cloak™ software brings advanced threat analytics to thousands of customers, and the Secureworks Counter Threat Platform™ processes over 300B threat events per day. We understand complex security environments and are passionate about simplifying security with Defense in Concert™ so that security becomes a business enabler. More than 4,000 customers across over 50 countries are protected by Secureworks, benefit from our network effect and are Collectively Smarter. Exponentially Safer.™ www.secureworks.com

We enjoy competitive compensation and benefits packages, and reward and recognize our employees for exceptional results. A constant focus on continued learning and growth keeps our team members engaged and excited about “what’s next.” We offer flexible work options when available and emphasize the importance of work-life balance. We know that when our people are rewarded, recognized, and rejuvenated, we win as a team.  

Role Responsibilities

  • Serve as a top subject matter expert in Cloud incident detection and analysis.
  • Participate in advanced incident response and targeted threat hunting engagements consisting of Cloud, IaaS, PaaS, and SaaS systems.
  • Collaborate with teammates to develop Cloud / SaaS focused threat intelligence that improves our incident response capabilities, our proprietary technology and protects our clients.
  • Development of countermeasures to detect or block threats.
  • Provide timely support for Cloud / SaaS based compromises.
  • Mentor teammates on countermeasures development, monitoring, tuning and analysis.
  • Advise upon future required Cloud / SaaS capabilities based on research into novel adversary techniques and the state of the art platforms.
  • Collaborate with offensive practitioners and researchers to improve authorized testing services.
  • Develop tools to simplify aspects of countermeasure and forensic for consultants and teammates.
  • Contribute to the development and delivery of competitive services, methodologies, and deliverables in the security marketplace.
  • Work as an internal subject matter expert for other departments, including marketing, product management, and the broader Counter Threat Unit research team.

Requirements

  • Minimum 10 years of experience in Analysis of collected evidence artifacts for incident response and/or detection research.
  • Minimum 3 years of experience in Event Log analysis and Audit for Cloud and SaaS.
  • Minimum 3 years of experience with one or more of the following: Python, C, C++, Go, Scala, Spark.

Preferred Skills

  • Experience in Cloud Security Products with at least one of the following: Datadog, Cyxtera, Lacework, ProtectWise, Okta, OneLogin.
  • Cloud / SaaS incident analysis and response (AWS, Azure, G Suite, O 365).
  • Experience in developing tools for cloud infrastructure analysis, network traffic analysis and the detection of malicious code in serverless infrastructure.
  • Experience developing detection methods on ELK, Greylog, Splunk, or other SIEM-like technologies.
  • Thorough knowledge of information security components, principles, practices, and procedures.
  • Thorough understanding of computer network exploitation (CNE) and computer network defense (CND) concepts.
  • MS or PhD in engineering/computer science.

Location

Remote, US

Secureworks (A Dell Technologies Company) is committed to the principle of equal employment opportunity for all employees and to providing employees with a work environment free of discrimination and harassment. All employment decisions at Secureworks are based on business needs, job requirements and individual qualifications, without regard to race, color, religion or belief, national, social or ethnic origin, sex (including pregnancy), age, physical, mental or sensory disability, HIV status, sexual orientation, gender identity and/or expression, marital, civil union or domestic partnership status, past or present military service, family medical history or genetic information, family or parental status, or any other status protected by the laws or regulations in the locations where we operate. Secureworks will not tolerate discrimination or harassment based on any of these characteristics.  Learn more about Diversity and Inclusion at Secureworks here.

Job ID: R066026

Apply Now
 

Join Our Talent Network

Sign up to stay up-to-date on our latest career opportunities, events and company news.

Interested InSelect a job category from the list of options. Search for a location and select one from the list of suggestions. Finally, click “Add” to create your job alert.

  • Secureworks, Annapolis Junction, Maryland, United StatesRemove
  • Secureworks, Austin, Texas, United StatesRemove
  • Secureworks, Chicago, Illinois, United StatesRemove
  • Secureworks, Dallas, Texas, United StatesRemove
  • Secureworks, Denver, Colorado, United StatesRemove
  • Secureworks, Portland, Oregon, United StatesRemove
  • Secureworks, Seattle, Washington, United StatesRemove
  • Secureworks, Atlanta, Georgia, United StatesRemove
  • Remote, Annapolis Junction, Maryland, United StatesRemove
  • Remote, Austin, Texas, United StatesRemove
  • Remote, Chicago, Illinois, United StatesRemove
  • Remote, Dallas, Texas, United StatesRemove
  • Remote, Denver, Colorado, United StatesRemove
  • Remote, Portland, Oregon, United StatesRemove
  • Remote, Seattle, Washington, United StatesRemove
  • Remote, Atlanta, Georgia, United StatesRemove