Integrity360 is hiring : Threat Content Developer in New York

Threat Content Developer

The role of Threat Content Developer provides the successful candidate with an opportunity to develop & enhance Integrity360's threat detection capabilities across Managed Detection & Response (MDR) service lines.

Tracking adversary activity across a range of industries, the successful applicant will help to ensure Integrity360-managed products are positioned to detect the latest tactics, techniques, and procedures employed by attackers.

Working alongside teams including Incident Response, Cyber Threat Intelligence, and Integrity360's Cyber Security Operations Centre (CSOC), the successful applicant will translate intelligence concerning adversary activity into detection capabilities which guide actionable investigations of real time threats.

You will bring your knowledge & expertise of security operations, threat detection and security platforms, and threat intelligence review to technically assess and prioritize evolving threats. Considering Integrity360's existing use case catalogue, you will help to identify and close gaps in coverage, continually improving detective capabilities with proactive and reactive additions to Integrity360's overall threat content roadmap.

If security is something that is not just your career but your passion you spend endless hours researching and reading about what is happening in the world and where / how the latest hacks or vulnerabilities exploits are happening.we want to hear from you!

Key Areas / Responsibilities

• Continual assessment of the Integrity360 detection portfolio, considering strengths and weaknesses and translating them into roadmap items and priorities.
• Ongoing analysis of various threat intelligence forms, tracking adversary activity in the context of adversary groups, campaigns, and software.
• Tracking emerging threats, such as 0-day exploits published for popular software used across the Integrity360 customer base.
• Continuous deployment of detection analytics (predominantly to SIEM), designed to detect any threats or risks identified during threat intelligence reviews.
• Engage with colleagues, from teams such as Incident Response, to identify indicators which may precede successful attacks, operationalizing those indicators into new detections.
• Contribute to the development of new tools used within the Threat Content Development team, typically leveraging automation to minimize delivery times and maximize intelligence integrations.
• Author technical documentation, with high-level explanations and low-level details of new detections and / or systems.

Qualifications / Qualities :

Basic :

Preferred :