Senior Threat Detection Engineer

hace 8 horas

Heredia, Costa Rica Experian A tiempo completo

Company Description

About us, but we'll be brief

Experian is the world's leading global information services company, unlocking the power of data to create more opportunities for consumers, businesses and society.
We are thrilled to share that FORTUNE has named Experian one of the 100 Best Companies to work for.
In addition, for the last five years we've been listed as one of the 100 "World's Most Innovative Companies" by Forbes Magazine.
**Job Description**:
The Threat Detection Engineering team within the global security operations center (GSOC) is responsible for developing and maintaining high-quality threat detection rules informed by the most critical threats targeting Experian.
The Cyber Threat Detection Engineer role is primarily responsible for:
1.
Maintaining and tuning high fidelity, low noise alerts to effectively identify and prioritize critical issues, minimizing false positives, and enhancing the overall security posture of Experian.
2.
Coordinate new Use Cases entering the ecosystem to detect against threats within the MITRE ATT&CK Framework, prioritized by cyber threat intelligence and situational awareness.
Duties include:

- Develop and maintain high-quality threat detection rules, queries, and alerts based on identified use cases, threat scenarios, and structured threat intelligence, including MITRE ATT&CK Tactics, Techniques and Procedures (TTPs).
- Leverage the MITRE ATT&CK Framework and other forms of structured threat intelligence to enhance detection capabilities, develop contextualized alerts, and improve overall security posture.
- Create and implement automated workflows and playbooks in tools such as Swimlane to enhance incident response capabilities and streamline security operation.
- Continuously research and stay up to date with the latest cyber threats, attack vectors, and methodologies to improve detection capabilities.
- Evaluate and recommend new security tools, techniques, and process to enhance the organization threat detection and response capabilities.
- Conduct regular reviews and assessments of detection rules and automated workflows to ensure optimal performance, effectiveness, and accuracy.
- Develop and maintain documentation related to threat detection and automation processes and procedures aligning to leading practices.
- Provide training and guidance to team members to enhance their understanding of threat detection methodologies, automation techniques, and structured threat intelligence.
**Qualifications**:
Demonstrates expert technical skills that are needed to defend the enterprise environment, such as:

- 3+ years of information security related experience, in areas such as: security operations, incident analysis, incident handling, vulnerability management or testing, system patching, log analysis, intrusion detection, or security device administration.
- Proficiency in Splunk or other SIEM tools, including rule creation, query writing, and alert management.
- Experience with Swimlane or other SOAR platforms and implementing automated workflows and playbooks.
- In-depth packet analysis skills, core forensic familiarity, incident response skills, and data fusion skills based on multiple security data sources.
- Scripting and automation.
- System administration on Unix, Linux, or Windows.
- Network forensics, logging, and event management.
- Defensive network infrastructure (operations or engineering).
- Vulnerability assessment and penetration testing concepts.
- Malware analysis concepts, techniques, and reverse engineering.
- In-depth knowledge of network and host security technologies and products (such as firewalls, network IDS, scanners) and continuously improve these skills.
- Security monitoring technologies, such as WAF, Web Proxies, UEBA, DLP, among others.
- Strong understanding of MITRE ATT&CK framework, cyber threat landscapes, attack vectors and threat actors.
- Familiarity with common cybersecurity frameworks such as NIST, or other leading practices, and industry standards.
- Relevant security certifications such as CISSP, GCIH, GCIA, or similar are highly desirable.
Demonstrates behavioral skills, such as:

- Strong analytical and problem-solving skills, with the ability to identify and prioritize critical issues.
- Excellent written and verbal communication skills, with the ability to clearly explain complex security concepts to both technical and non-technical audiences.
- Ability to lead content discussion around incident investigation efforts and effectively coordinate communications.
- Demonstrated ability to work in a team environment, able to train and coach other team members.
- Strong logical thinking abilities, especially with content logic.
- Excellent analytical and problem-solving abilities.
- Excellent organizational and attention to details in tracking activities within various Security Operation workflows.
- Well established client-focused communication skills that requires to read, review, investigate, a

  • Cfc Cti Senior Cyber Threat Hunter

    hace 3 días

    Heredia, Costa Rica Experian A tiempo completo

    Company Description Experian is the world’s leading global information services company. During life’s big moments - from buying a home or a car, to sending a child to college, to growing a business by connecting with new customers - we empower consumers and our clients to manage their data with confidence. We help individuals to take financial control...

  • Cfc Cti Senior Cyber Threat Hunter

    hace 22 horas

    Heredia, Costa Rica Experian A tiempo completo

    Company DescriptionExperian is the world's leading global information services company.During life's big moments - from buying a home or a car, to sending a child to college, to growing a business by connecting with new customers - we empower consumers and our clients to manage their data with confidence.We help individuals to take financial control and...

  • Cybersecurity Detection Engineer

    hace 1 día

    Heredia, Costa Rica Stryker A tiempo completo

    **Why join Stryker?**:Our total rewards package offering includes bonuses, healthcare, insurance benefits, retirement programs, wellness programs, as well as service and performance awards - not to mention various social and recreational activities, all of which are location specific.**Know someone at Stryker?**:- Analyze cybersecurity threats related or...

  • Cfc Cti Cyber Threat Hunter

    hace 8 horas

    Heredia, Costa Rica Experian A tiempo completo

    Full-timeEmployee Status: RegularRole Type: HybridDepartment: Legal & ComplianceSchedule: Full TimeShift: Day Shift**Company Description**:Experian is the world's leading global information services company.During life's big moments - from buying a home or a car, to sending a child to college, to growing a business by connecting with new customers - we...

  • Cfc Cti Cyber Threat Hunter

    hace 8 horas

    Heredia, Costa Rica Experian A tiempo completo

    Company DescriptionExperian is the world's leading global information services company.During life's big moments - from buying a home or a car, to sending a child to college, to growing a business by connecting with new customers - we empower consumers and our clients to manage their data with confidence.We help individuals to take financial control and...

  • Sr. Insider Threat Investigator

    hace 1 día

    Heredia, Costa Rica Experian A tiempo completo

    Company DescriptionExperian is the world's leading global information services company.During life's big moments - from buying a home or a car, to sending a child to college, to growing a business by connecting with new customers - we empower consumers and our clients to manage their data with confidence.We help individuals to take financial control and...

  • Cyber Security Engineer

    hace 4 días

    Heredia, Costa Rica Equifax A tiempo completo

    **Equifax is where you can power your possible. If you want to achieve your true potential, chart new paths, develop new skills, collaborate with bright minds, and make a meaningful impact, we want to hear from you. **As a critical team member of the Equifax Cyber Countermeasures Team, you will drive our incident response and analytic capabilities,...

  • Security Lead Engineer

    hace 1 día

    Heredia, Costa Rica Auxis A tiempo completo

    Job Summary:Security Lead Engineer is responsible for the provisioning, deployment, configuration, and administration of many different pieces of network and security-related hardware and software.Security Lead Engineer is also responsible to mitigate any potential threats that become evident, but also to strategize and prepare before any security threat is...

  • Cyber Security Data Engineer

    hace 6 días

    Heredia, Costa Rica Stryker A tiempo completo

    **Why join Stryker?**: Our total rewards package offering includes bonuses, healthcare, insurance benefits, retirement programs, wellness programs, as well as service and performance awards - not to mention various social and recreational activities, all of which are location specific. **Know someone at Stryker?**: **Who we Want**: - ** Dedicated...

  • Support Engineer

    hace 20 horas

    Heredia, Costa Rica IBM A tiempo completo

    Introduction **At IBM, work is more than a job - it's a calling**: To build. To design. To code. To consult. To think along with clients and sell. To make markets. To invent. To collaborate. Not just to do something better, but to attempt things you've never thought possible. Are you ready to lead in this new era of technology and solve some of the world's...

  • Principal Engineer Security Services

    hace 1 día

    Heredia, Costa Rica 360Training A tiempo completo

    **Principal Engineer Security Services**The Principal Engineer Security Services will play a crucial role in ensuring the ongoing security and protection of our company's information assets.They will be responsible for designing, developing, and overseeing the implementation of cybersecurity solutions to safeguard our systems, networks, and data.The...

  • Senior Security Incident Responder

    hace 1 día

    Heredia, Costa Rica Tebra A tiempo completo

    **About the Role**:A security engineer to join our team to focus on threat detection and response protection.In this position, you will investigate security issues using log data, networking tools and big data search engines to stop threats impacting our internal and external customers.You will be part of Tebra's security team as a trusted resource to help...

  • Security Engineer

    hace 1 día

    Heredia, Costa Rica Experian A tiempo completo

    Company DescriptionExperian is a global leader in consumer and business credit reporting and marketing services and a constituent of the United Kingdom's FTSE 100 index, with total revenue for the year ended March 31, 2020, of US$5.2 billion.We support clients in more than 100 countries and employ approximately 17,800 people in 45 countries.Job...

  • Senior Python Engineer

    hace 1 día

    Heredia, Costa Rica Fusionhit A tiempo completo

    **We are looking for a Senior Python Software Engineer to join a fast-growing start-up environment for a Vegas-based client.This person will be joining a large established team within FusionHit with long term goals and growth potential.****Must reside and have work authorization in Costa Rica, El Salvador, Bolivia or Colombia to apply.**- 6+ years of...

  • Senior Python Engineer

    hace 2 días

    Heredia, Costa Rica FusionHit A tiempo completo

    **We are looking for a Senior Python Software Engineer to join our growing team in a fast-growing start-up environment for a San Francisco-based client. Teams are currently distributed with 3 junior to mid-level team members in need of mentoring. Must reside and have work authorization in Costa Rica, El Salvador or Colombia to apply.** - 4+ years of...

  • Senior Escalation Engineer

    hace 1 día

    Heredia, Costa Rica Cloud Software Group A tiempo completo

    **Senior Escalation Engineer Virtualization**:Do you enjoy tackling hard-to-solve technical problems?Are you interested in gaining exposure to exciting products?Are you looking for the opportunity for growth and learning?Would you like to work for one of the most innovative companies around?If you answered yes to these questions, we may have the job for...

  • Senior Quality Engineer

    hace 22 horas

    Heredia, Costa Rica Sgf Global A tiempo completo

    **Senior Quality Engineer (Hybrid)****Heredia, Costa Rica**SGF Global is looking for a Senior Quality Engineer, for IT enterprise in Heredia, Costa Rica.**Requirements**:- Bachelor's degree in computer science or equivalent required.- Strong expertise in identifying the scope of automation, driving the automation test development.- Programming Languages: -...

  • Senior Security Operations Analyst

    hace 1 día

    Heredia, Costa Rica Encora A tiempo completo

    This is an exciting time for our Information Security team.In this position you will be an integral part of a developing enterprise Information Security Program.Your focus will be on security threat identification and incident escalation activities, as well as working with engineers to design and implement more effective security monitoring solutions.As a...

  • Senior Information Security Consultant

    hace 1 día

    Heredia, Costa Rica Dhl A tiempo completo

    **About the role**:We're looking for an experienced and passionate Consultant, Information Security "Threat and Vulnerability Management" to join our Information Security Services team!Being part of this team, you will drive our threat and vulnerability management across the technology stack.Your job is to identify and help remediating security threats and...

  • Sr. Cybersecurity Engineer

    hace 1 día

    Heredia, Costa Rica Sysco Costa Rica A tiempo completo

    As a cyber engineer, you will be responsible for developing and implementing security measures to safeguard computer systems, networks, and data against cyber threats.You will work closely with other IT professionals to design and deploy secure solutions.**Responsibilities**- **Cybersecurity Strategy**: Develop and implement cybersecurity strategies,...