WHAT YOU’LL DO:

As a Junior Detection Engineer at Kaseya, you’ll be at the forefront of defending our customers from evolving cyber threats. You’ll research the latest malware and adversary tactics to develop and fine-tune detection logic for our security products. Your work will be essential in building high-confidence detection analytics that enable our products to respond swiftly to cyber attacks, keeping our customers and their businesses safe. You'll collaborate with talented security teams to identify gaps, simulate attacks, and continuously improve our detection capabilities.

WHAT WE ARE LOOKING FOR:

We’re looking for a motivated Junior Detection Engineer to join our detection engineering team. This role is perfect for someone who has a solid foundation in networking and cyber operations and is eager to learn more about detection engineering and threat research. You’ll be part of a fast-moving team and will work alongside experts in the field, gaining valuable hands-on experience and advancing your career in cybersecurity. If you're passionate about making an impact and excited about cybersecurity, we'd love to hear from you!

ESSENTIAL DUTIES AND RESPONSIBILITIES:

• Research Cyber Threats: Study the latest malware and TTPs (Tactics, Techniques, and Procedures) to understand and identify emerging threats.
• Develop Detection Logic: Build, tune, and maintain detection rules and analytics across Kaseya’s security products, including Endpoint Detection and Response (EDR), to detect adversaries.
• Simulate Adversary Attacks: Collaborate with the team to simulate attacks and test detection logic to improve the accuracy and effectiveness of our detection capabilities.
• Collaborate with Product Teams: Work closely with security product teams to identify detection gaps and enhance product functionality.
• Support SOC Teams: Serve as a technical resource to Security Operations Centers (SOC), aiding in the use of detection capabilities during active response efforts.

WHAT YOU’LL BRING:

• Experience:
  • At least 3 years working in networking administration or networking.
  • At least 1 year of hands-on experience in cyber operations, such as SIEM, EDR monitoring, incident response, threat hunting, or forensics.
• Cybersecurity Knowledge:
  • Experience with common malware families and methods adversaries use to maintain access to networks.
  • Basic understanding of Windows, Linux, or MacOS operating systems.
  • Familiarity with MITRE ATT&CK™ and other TTPs used by attackers.
• Technical Skills:
  • Familiarity with regex and SQL-type query languages to write and tune detection rules.

DESIRED SKILLS:

• Education: Bachelor's degree in IT, Computer Science, or a related field, or equivalent work experience.
• Threat Hunting & Data Analytics: Familiarity with databases and tools used for threat hunting and data analytics.
• Scripting Skills: Familiarity with scripting languages like Bash or PowerShell.
• Certifications:
  • One or more of the following certifications are a plus: SEC+, CEH, GCFA, GCFE, GREM, GNFA, or OSCP.