DFIR & Threat Hunting Researcher

Posted 9 Hours Ago
Be an Early Applicant
Petah Tikva
Mid level
Security • Software
The Role
As a DFIR & Threat Hunting Researcher, you will conduct digital forensics and threat-hunting activities across CyberArk's network and cloud environments. Responsibilities include performing forensic analysis, supporting incident response, developing hunting hypotheses, and improving tools and automation for threat detection.
Summary Generated by Built In

Company Description

About CyberArk:
CyberArk (NASDAQ: CYBR), is the global leader in Identity Security. Centered on privileged access management, CyberArk provides the most comprehensive security offering for any identity – human or machine – across business applications, distributed workforces, hybrid cloud workloads and throughout the DevOps lifecycle. The world’s leading organizations trust CyberArk to help secure their most critical assets. To learn more about CyberArk, visit our CyberArk blogs or follow us on Twitter, LinkedIn or Facebook.

Job Description

What will you do:

CyberArk, the global leader in Identity Security, is looking for a skilled and passionate DFIR & Threat Hunting Researcher to join its Global Information Security Team. In this role, you will conduct digital forensics and threat-hunting activities across CyberArk's global network, endpoints, and cloud environments. You will also research and develop new methods and tools to enhance the detection and response capabilities of the CyberArk Information Security team.

- Digital Forensics and Incident Response (DFIR):

  • Perform digital forensics analysis on various types of evidence, such as disk, memory, network, and cloud artifacts (AWS – advantage).
  • Support incident response efforts by providing technical expertise, containment, eradication, and recovery guidance.
  • Maintain and operate forensic tools and platforms, ensuring they are up-to-date and reliable.
  • Document and report on forensic findings and recommendations, following the established procedures and standards.

- Threat Hunting:

  • Proactively hunt for malicious activity and indicators of compromise across CyberArk's network, endpoints, and cloud environments using various data sources and analytical techniques.
  • Develop and refine custom threat-hunting hypotheses, queries, and dashboards based on the latest threat intelligence and trends.
  • Collaborate with the SOC team to validate, escalate, and respond to identified threats.

- Research and Development:

  • Research emerging threats, attack vectors, threat actors, ATPs, security technologies and CyberArk products and share insights and best practices with the team and the broader security community.
  • Develop and improve tools, scripts, correlation alerts and automation to enhance the SOC team's DFIR and threat-hunting capabilities.

    LI-CR1

    Qualifications

    What you need to succeed:

    • Proven (3+ years) experience in digital forensics and incident response, preferably in a tech company or a security consulting firm.
    • Hands-on experience with industry standard forensic tools and platforms.
    • Hands-on experience with threat hunting tools, query languages and platforms, such as ELK, Splunk, QRadar, KQL, SQL etc.
    • Strong knowledge of network protocols, operating systems, malware analysis, and cloud security.
    • Ability to automate tasks using a scripting language such as Python & JS.
    • Excellent communication and interpersonal skills.
    • Excellent proficiency in English, both written and verbal, is a must.
    • Curious and creative mindset, with a passion for learning and solving complex problems.
    • Ability to work independently and collaboratively in a fast-paced, dynamic environment and with a multi-region team.

    How will you stand out from the crowd:

    • GCFE, GCFA, GNFA, GCTI, OSCP, or equivalent.

    Top Skills

    JavaScript
    Python
    The Company
    Hyderabad, Telangana
    2,327 Employees
    On-site Workplace

    What We Do

    CyberArk is the global leader in Identity Security. Centered on privileged access management, CyberArk provides the most comprehensive security offering for any identity – human or machine – across business applications, distributed workforces, hybrid cloud workloads and throughout the DevOps lifecycle. The world’s leading organizations trust CyberArk to help secure their most critical assets.

    For over a decade CyberArk has led the market in securing enterprises against cyber attacks that take cover behind insider privileges and attack critical enterprise assets. Today, only CyberArk is delivering a new category of targeted security solutions that help leaders stop reacting to cyber threats and get ahead of them, preventing attack escalation before irreparable business harm is done. At a time when auditors and regulators are recognizing that privileged accounts are the fast track for cyber attacks and demanding stronger protection, CyberArk’s security solutions master high-stakes compliance and audit requirements while arming businesses to protect what matters most.

    With offices and authorized partners worldwide, CyberArk is a vital security partner to more than 6,770 global businesses, including:

    More than 50% of the Fortune 500
    More than 35% of the Global 2000

    CyberArk has offices in the U.S, Israel, U.K., Singapore, Australia, France, Germany, Italy, Japan, Netherlands and Turkey.

    Jobs at Similar Companies

    Jobba Trade Technologies, Inc. Logo Jobba Trade Technologies, Inc.

    Senior Back End Developer

    Cloud • Information Technology • Productivity • Professional Services • Software
    Remote
    Hybrid
    Chicago, IL, USA
    45 Employees

    bet365 Logo bet365

    Corporate Development Specialist

    Digital Media • Gaming • Software • eSports • Automation
    Denver, CO, USA
    6100 Employees
    120K-160K Annually

    Silverfort Logo Silverfort

    Senior Manager, Deal Desk

    Information Technology • Sales • Security • Cybersecurity • Automation
    Remote
    United States
    357 Employees

    Similar Companies Hiring

    Silverfort Thumbnail
    Security • Sales • Information Technology • Cybersecurity • Automation
    GB
    357 Employees
    bet365 Thumbnail
    Software • Gaming • eSports • Digital Media • Automation
    Denver, Colorado
    6100 Employees
    Jobba Trade Technologies, Inc. Thumbnail
    Software • Professional Services • Productivity • Information Technology • Cloud
    Chicago, IL
    45 Employees

    Sign up now Access later

    Create Free Account

    Please log in or sign up to report this job.

    Create Free Account