Remote Associate Detection and Response Engineer

Summary

Join Expel as a SOC analyst and contribute to the company's innovative approach to managed security, driving significant security capabilities and learning from experts in various fields.

Requirements

• Familiarity with detection and response tools
• Knowledge of attack vectors, threat tactics, and attacker techniques
• Hands-on experience developing in Python for the purposes of automating mundane tasks
• Understanding of Windows and Linux operating systems and command line tools
• Familiarity with networking fundamentals, TCP/IP and core protocols
• Developing an expertise in one or more of the following technical areas: data analytics, remediation strategies, and offensive security
• Experience with cloud or container platforms is a tremendous advantage

Responsibilities

• Maintain and improve Expel's ability to detect and investigate threats using integrated technologies
• Continuously improve Expel’s detection capability through creation of rules for Expel’s proprietary rule engine
• Improve SOC analyst efficiency by automating investigative workflows using an orchestration framework written in Python
• Gain familiarity with Expel’s integrations and engineering standards associated with each class of integration
• Thrive in a culture of experimentation, agile, quality and continuous improvement among the team
• Participate in the team’s research and monitoring of the latest threat landscape and subsequent detection development
• Communicate effectively with stakeholders on support requests surfaced to the D&R engineering team

Benefits

• 25 days annual leave in addition to public holidays
• Parental leave
• Excellent health benefits