Skip to main content

Edinburgh, United Kingdom

Senior Security Researcher - Detection - Secureworks - Remote, UK

Belfast, United Kingdom; Bracknell, United Kingdom; Brentford, United Kingdom; Camberley, United Kingdom; Cardiff, United Kingdom; Chiswick Park, United Kingdom; Crewe, United Kingdom; Exeter, United Kingdom; Glasgow, United Kingdom; Ilminster, United Kingdom; Kingston upon Thames, United Kingdom; London, United Kingdom; Manchester, United Kingdom; Mansfield Woodhouse, United Kingdom; Nottingham, United Kingdom; Peterborough, United Kingdom; Poole, United Kingdom; Remote - United Kingdom (All Other); Remote - United Kingdom (London-Thames Valley); Remote - United Kingdom (Scotland); Rickmansworth, United Kingdom; Slough, United Kingdom; Southampton, United Kingdom; Thames Ditton, United Kingdom

Apply Now

as rated by current and former employees

Secureworks® (NASDAQ: SCWX) is a global cybersecurity leader that protects customer progress with Secureworks® Taegis™, a cloud-native security analytics platform built on 20+ years of real-world threat intelligence and research, improving customers’ ability to detect advanced threats, streamline and collaborate on investigations, and automate the right actions.

www.secureworks.com

We enjoy competitive compensation and benefits packages, and reward and recognize our employees for exceptional results. A constant focus on continued learning and growth keeps our team members engaged and excited about “what’s next.” We offer flexible work options when available, and emphasize the importance of work-life balance. We know that when our people are rewarded, recognized, and rejuvenated, we win as a team.  

The successful candidate must be a strong leader in the security field with proven technical skills and experience researching, hunting for and responding to advanced threat actors. As a member of a highly trained security research team – The Counter Threat Unit (CTU™) - the person will provide technical leadership for client-focused projects, generate high-confidence threat intelligence and contribute to the development of advanced technologies and processes to detect threat actors and enhance protections for our Managed Security Services clients.  They will also work closely with teammates and our Security and Risk Consulting delivery teams to provide subject matter expertise in support of Cyber-Security Incident Management (such as incident handling, breach management, forensics, electronic discovery, etc.). 

Role Responsibilities

  • Development of countermeasures to detect or block threats:

    • Explore new detection mechanisms

      • Transform new and emerging threat research into actionable detection measures. Leveraging creative countermeasure development techniques and detection tooling.

    • Endpoint countermeasures

      • Discover how a threat manifests on the endpoint and research how to detect that threat in process, file, persistence, thread injections, or in-memory artifacts.

    • Network IDS/IPS countermeasures

      • Analyze how a network enabled threat transmits data over the wire and research how to detect or block that threat with Snort or Suricata IDS/IPS rule creation.

  • Contribute to the development and delivery of competitive services, methodologies, and deliverables in the security marketplace.

  • Provide timely support for advanced malware analysis and reverse engineering escalations.

  • Serve as a top subject matter expert in key elements of the practice (e.g. Forensics, Malware Analysis, Security Technologies...)

  • Work as an internal subject matter expert for other departments, including marketing, product management, and the broader Counter Threat Unit research team.

Requirements

  • Static and dynamic malicious code analysis.

    • Reverse engineering IA32/64 architecture binaries designed for popular operating systems (Windows, OSX, Linux).

    • Reverse engineering mobile ARM architecture binaries.

  • Programming and software prototyping.

    • Proficient in at least one of the following programming languages, Python, Golang, C/C++.

    • Familiarity with CI/CD pipelines, testing and automation.

  • Forensic analysis of collected evidence artifacts.

    • Analysis of memory images from common OS types.

    • Analysis of disk images that may involve various file systems (NTFS, FAT, EXT, HFS+...) and operating systems.

  • Network traffic analysis.

    • Identifying detectable traits of threat network traffic.

    • Broad analysis of traffic patterns to identify anomalies.

  • Event log analysis.

    • Inspection of log data from common operating systems and security infrastructure to identify threat activity and piece together an incident.

    • Analysis of log data from security infrastructure (firewalls, web proxy etc.) to identify anomalous patterns of behavior.

  • MS in engineering/computer science and 10 years relevant experience or PhD with 5 years relevant experience.

Preferences:

  • Performing analysis of security and infrastructure logs using modern data analysis strategies.

  • Researching targeted threat groups and their tactics, techniques and procedures (TTP).

  • Experience in developing tools for malicious code analysis, network traffic analysis and the detection of malicious code on endpoint systems is a strong plus.

  • Performing vulnerability and exploit research and analysis.

  • Strong understanding of computer architecture and operating systems concepts.

  • Thorough knowledge of information security components, principles, practices, and procedures.

  • Thorough understanding of computer network exploitation (CNE) and computer network defense (CND) concepts.

  • Ability to articulate and present findings to broader audiences in a clear manner.

  • 5% travel may be required.

Why work with us?

Secureworks, a Dell Technologies company, is committed to the principle of equal employment opportunity for all employees and to providing employees with a work environment free of discrimination and harassment. All employment decisions at Secureworks are based on business needs, job requirements and individual qualifications, without regard to race, colour, religion or belief, national, social or ethnic origin, sex (including pregnancy), age, physical, mental or sensory disability, HIV status, sexual orientation, gender identity and/or expression, marital, civil union or domestic partnership status, past or present military service, family medical history or genetic information, family or parental status, or any other status protected by the laws or regulations in the locations where we operate. Secureworks will not tolerate discrimination or harassment based on any of these characteristics.

Job ID: R191401

Request an Accomodation Apply Now

Why Work Here

Global Benefits

  • Comprehensive Healthcare Programs

  • Award Winning Financial Wellness Tools and Resources

  • Generous Leave of Absence for New Parents and Caregivers

  • Industry Leading Wellness Platform

  • Employee Assistance Program

Be The First To See New Opportunities

Join Our Talent Network

Sign up, stay connected and get opportunities that match your skills sent right to your inbox.

*Denotes required field

Interested InSelect a job category and/or location, then click "Add" for each saved search. Finally, click "Sign Up" to create your job alert.

  • Information Technology, RemoteRemove
  • Information Technology, Edinburgh, Scotland, United KingdomRemove
  • Information Technology, Bracknell, England, United KingdomRemove
  • Information Technology, Brentford, England, United KingdomRemove
  • Information Technology, Camberley, England, United KingdomRemove
  • Information Technology, Cardiff, Wales, United KingdomRemove
  • Information Technology, London, England, United KingdomRemove
  • Information Technology, Crewe, England, United KingdomRemove
  • Information Technology, Exeter, England, United KingdomRemove
  • Information Technology, Glasgow, Scotland, United KingdomRemove
  • Information Technology, Ilminster, England, United KingdomRemove
  • Information Technology, Kingston upon Thames, England, United KingdomRemove
  • Information Technology, Manchester, England, United KingdomRemove
  • Information Technology, Mansfield Woodhouse, England, United KingdomRemove
  • Information Technology, Nottingham, England, United KingdomRemove
  • Information Technology, Peterborough, England, United KingdomRemove
  • Information Technology, Poole, England, United KingdomRemove
  • Information Technology, Rickmansworth, England, United KingdomRemove
  • Information Technology, Slough, England, United KingdomRemove
  • Information Technology, Southampton, England, United KingdomRemove
  • Information Technology, Thames Ditton, England, United KingdomRemove
  • Secureworks, RemoteRemove
  • Secureworks, Edinburgh, Scotland, United KingdomRemove
  • Secureworks, Bracknell, England, United KingdomRemove
  • Secureworks, Brentford, England, United KingdomRemove
  • Secureworks, Camberley, England, United KingdomRemove
  • Secureworks, Cardiff, Wales, United KingdomRemove
  • Secureworks, London, England, United KingdomRemove
  • Secureworks, Crewe, England, United KingdomRemove
  • Secureworks, Exeter, England, United KingdomRemove
  • Secureworks, Glasgow, Scotland, United KingdomRemove
  • Secureworks, Ilminster, England, United KingdomRemove
  • Secureworks, Kingston upon Thames, England, United KingdomRemove
  • Secureworks, Manchester, England, United KingdomRemove
  • Secureworks, Mansfield Woodhouse, England, United KingdomRemove
  • Secureworks, Nottingham, England, United KingdomRemove
  • Secureworks, Peterborough, England, United KingdomRemove
  • Secureworks, Poole, England, United KingdomRemove
  • Secureworks, Rickmansworth, England, United KingdomRemove
  • Secureworks, Slough, England, United KingdomRemove
  • Secureworks, Southampton, England, United KingdomRemove
  • Secureworks, Thames Ditton, England, United KingdomRemove
  • Remote, RemoteRemove
  • Remote, Edinburgh, Scotland, United KingdomRemove
  • Remote, Bracknell, England, United KingdomRemove
  • Remote, Brentford, England, United KingdomRemove
  • Remote, Camberley, England, United KingdomRemove
  • Remote, Cardiff, Wales, United KingdomRemove
  • Remote, London, England, United KingdomRemove
  • Remote, Crewe, England, United KingdomRemove
  • Remote, Exeter, England, United KingdomRemove
  • Remote, Glasgow, Scotland, United KingdomRemove
  • Remote, Ilminster, England, United KingdomRemove
  • Remote, Kingston upon Thames, England, United KingdomRemove
  • Remote, Manchester, England, United KingdomRemove
  • Remote, Mansfield Woodhouse, England, United KingdomRemove
  • Remote, Nottingham, England, United KingdomRemove
  • Remote, Peterborough, England, United KingdomRemove
  • Remote, Poole, England, United KingdomRemove
  • Remote, Rickmansworth, England, United KingdomRemove
  • Remote, Slough, England, United KingdomRemove
  • Remote, Southampton, England, United KingdomRemove
  • Remote, Thames Ditton, England, United KingdomRemove