Cyber Security, Senior - Secureworks - (Remote US)
Secureworks® (NASDAQ: SCWX) a global cybersecurity leader, enables our customers and partners to outpace and outmaneuver adversaries with more precision, so they can rapidly adapt and respond to market forces to meet their business needs. With a unique combination of cloud-native, SaaS security platform and intelligence-driven security solutions, informed by 20+ years of threat intelligence and research, no other security platform is grounded and informed with this much real-world experience. www.secureworks.com
We enjoy competitive compensation and benefits packages, and reward and recognize our employees for exceptional results. A constant focus on continued learning and growth keeps our team members engaged and excited about “what’s next.” We offer flexible work options when available and emphasize the importance of work-life balance. We know that when our people are rewarded, recognized, and rejuvenated, we win as a team.
We are looking for a Threat Engagement Manager that is a core component of the SecureWorks® Taegis™ ManagedXDR service and their mission is to collaborate with our customers to ensure they fully benefit and understand the value of our service through periodic reviews of their security posture and to provide guidance and recommendations on how to defend against potential threats in their environment.
Role Responsibilities
Participate in the customer onboarding process to understand the customer environment and how it applies to our services during the onboarding process
Collaborate with customers to learn about established security controls within their environment and the value they will add to security event analysis within the SecureWorks® platform
Periodically meet with the customer to provide security guidance to develop and deliver strategic recommendations that will help improve their security posture
Assist the customer in tuning recommendations to tailor services to their needs
Provide customers insight into new detectors being deployed and how they improve security efficacy
Maintain updated customer profile and pertinent information in internal operational support systems
Research, evaluate, and stay current on emerging tools, techniques, and technologies
Acts as a mentor, working side by-side with other colleagues in an advisory, support and training role
Experience
5+ years of relevant experience or equivalent combination of education and work experience (bachelor’s degree or similar in Computer Science, Network Security, Information Security or another applicable field)
Industry certification from vendors: ISC2, GIAC, EC-Council, Cisco, Juniper, CompTIA, Unix, Microsoft, Oracle, etc. (eg: CISSP, GCIA, GWAPT, GCIH, GCFA/GCFE, GREM, OSCP/OSCE)
Strong communication skills to be able to deliver presentations in English (remote and in person) to large groups for metrics, analysis, threat landscape, observations/recommendations
Experience with and strong understanding of:
Performing both endpoint and network-based investigations
Reviewing logs to identify evidence of past intrusions and the scope and breadth of attacks
Malware, exploit kit functionality, operating system and application exploits
Lateral movement, living-off-the-land and persistence establishment mechanisms
Threat hunting methodologies and detection of anomalous system activity
Incident response and incident handling processes
Location
Secureworks (A Dell Technologies Company) is committed to the principle of equal employment opportunity for all employees and to providing employees with a work environment free of discrimination and harassment. All employment decisions at Secureworks are based on business needs, job requirements and individual qualifications, without regard to race, color, religion or belief, national, social or ethnic origin, sex (including pregnancy), age, physical, mental or sensory disability, HIV status, sexual orientation, gender identity and/or expression, marital, civil union or domestic partnership status, past or present military service, family medical history or genetic information, family or parental status, or any other status protected by the laws or regulations in the locations where we operate. Secureworks will not tolerate discrimination or harassment based on any of these characteristics. Learn more about Diversity and Inclusion at Secureworks here.
As members of the disability confident scheme, we guarantee to interview all disabled applicants who meet the minimum criteria for the vacancies and ensure our recruitment process is inclusive and accessible.
