Principal Detection Engineer

Summary

Join Red Canary's Cyber Incident Response Team (CIRT) as a Principal Detection Engineer and lead efforts to improve threat detection and response. You will work independently and with teams to solve complex problems, perform advanced malware analysis, build new detection capabilities, and enhance the CIRT's knowledge base. This role requires demonstrated excellence as a Detection Engineer or similar, outstanding analytical skills, and experience leading complex projects. Red Canary offers a competitive salary, bonus program, stock options, and a comprehensive benefits package including 100% paid medical, dental, and vision, flexible time off, paid parental leave, and a flexible work environment.

Requirements

• Demonstrated excellence and sustained, superior performance as a Detection Engineer, SOC Analyst, or similar role
• Outstanding analytical and problem-solving skills
• Experience successfully leading complex projects and taking ownership of processes with minimal oversight
• Ability to work in a fast-paced, operational environment and successfully prioritize important tasks
• Deep understanding of adversary tactics and techniques
• Analysis experience and proficiency in Endpoint (MDR) and one or more of the following functional area
• Cloud/SaaS
• Identity
• Email
• SIEM
• Experience working with security telemetry and date from security products and building queries to identify potential threats
• Technical proficiencies across Windows, Linux, and MacOS
• Experienced working with programming languages such as Ruby, Go, Python, and SQL

Responsibilities

• Work independently on highly complex problems across detection, engineering, and workflow to improve Red Canary’s threat reporting and response
• Lead task-organized teams as a technical expert to solve specific, complex problems
• Use Red Canary’s detection platform, endpoint data, and external resources to uncover threats and tell the story of what occurred in a customer environment
• Perform advanced malware analysis
• Build new detection capabilities into the Red Canary platform based on your research of new attack techniques
• Leverage previous SOC experience to enhance the CIRT’s knowledge-base and expertise
• Improve the CIRT workflow through automation
• Apply mature software development techniques while delivering high-quality, well-tested code in the CIRT platform to fix or improve the operational workflow
• Actively engage with the CIRT team to challenge the status quo for detecting adversarial behavior
• Contribute to improvements that will increase the quality of the Red Canary product

Benefits

• 100% Paid Premiums: Red Canary offers a 100% paid plan option for medical, dental and vision for you and your dependents. No waiting period
• Health & Wellness - Access to mental health services, Employee Assistance Program and additional programs to incentivize healthy habits
• Fertility Benefits: All new hires are eligible for benefits as of their first day
• Flexible Time Off: Take the time you need to recharge including vacation, sick, bereavement, jury duty, and holidays
• Paid Parental Leave- Full base pay to bond/care for your new child
• Pre-Tax Plans - Red Canary offers a variety of plans to fit you and your dependent specific needs including FSA, HRA and HSA, with employer funding to offset out of pocket health care expenses
• Flexible Work Environment- With 60% remote workforce, Canaries can work virtually from almost anywhere in the US