Job Description

Who You'll Work With:

Creating leading threat intelligence is the focus of the Cisco Talos Security Intelligence and Research Group (Talos). Talos is comprised of leading threat researchers supported by sophisticated systems. Talos researchers create threat intelligence for Cisco products to protect customers from both known and emerging threats. The team's expertise spans software development, reverse engineering, vulnerability triage, malware investigation, and intelligence gathering. Talos maintains the official rule sets and communities of Snort.org, ClamAV, SenderBase.org and SpamCop.

Threat Intelligence and Interdiction Team:

The Threat Intelligence and Interdiction team is a self-contained threat discovery, analysis, response, and reporting body made up of diverse and specialized security, intelligence, and research skill sets. Threat Intelligence Researchers work to investigate and identify threat actor campaigns and generate actionable intelligence for the Talos Security Group in the form of detection and written analysis. This position also works closely with Cisco Talos's Incident Response team to deliver up-to-date analysis of the latest threat activity.

Role and Responsibilities:

Research, analyze, and undermine threat actor campaigns

Generate actionable intelligence in support of incident response objectives

Proactively hunt for adversaries on customer networks leveraging a variety of tools and techniques

Pivot on indicators-of-compromise through large telemetry sets to uncover related tools, tactics, and procedures

Author written analysis on demand in response to a wide range of threat intelligence questions

Engineer original approaches for detecting and connecting threat activity

Develop innovative solutions for advancing research capability

Act as a trusted interface to private and public organizations into Cisco's Threat Intelligence groups

Minimum Qualifications:

Strong understanding of information systems and communication protocols

Strong understanding of information security and the threat landscape

Strong deductive reasoning ability

Proactive problem solver and highly developed sense of curiosity

Ability to work in a dynamic, rapidly moving work environment

Excellent verbal and written communications skills

Fluency in Japanese and English

Desired Skills:

Detailed understanding of current cyber security threats, attacks, and countermeasures

Strong understanding of adversary attack methodologies, techniques, and infrastructure

Experience with network and endpoint forensics

Experience with threat intelligence research

Experience with malicious payload and tool analysis

Proficiency in at least one programming language

Demonstrated expertise in incident response and/or network forensics

Job Tags

Similar Jobs