Detection Engineer II

Role Overview

We are seeking an experienced Threat Detection Engineer to extend Vectra's detection capabilities in partnership with Data Scientists and Security Researchers who are developing our AI-driven Attack Signal. Detection Engineers focused on Network attack behaviors complement Vectra's coverage by building Suricata signatures, specifying detection logic in Python, and utilizing other available methods.

Responsibilities

• Analyze network traffic to identify and document threat patterns.
• Develop and maintain network-based security signatures in Suricata.
• Use offensive security tools and techniques to simulate attacks and generate sample network traffic.
• Collaborate with data scientists and security researchers to support detection efforts and improve detection accuracy.
• Continuously monitor and assess the effectiveness of network detections, making adjustments as needed.
• Contribute to threat hunting efforts by identifying new tactics, techniques, and procedures (TTPs) used by attackers.
• Participate in incident response activities as required.

Requirements

• 4-6 years of cybersecurity experience (preferably focused on threat detection and response).
• Expertise in writing signatures with Suricata.
• Advanced knowledge of common operating systems, services, networking protocols, logging, cloud and SaaS environments.
• Knowledge of attacker techniques and tools (e.g., Metasploit, Cobalt Strike).
• Familiarity with data utilized by detection technology, for example PCAPs, flow logs, cloud logs, etc.
• Proficiency with related languages and frameworks, e.g. Bash, Python, Sigma, YARA-L, Linux/Unix, Wireshark, etc.
• Scripting, software development, engineering, and/or devops experience; experience with a source control system, preferably Git.

Skills

• Suricata
• Python
• Wireshark
• Linux
• Git

Benefits

• Competitive base pay and incentive plan eligibility.
• Participation in the employee equity plan (stock options).
• Health care insurance and income protection / life insurance.
• Access to retirement savings plans.
• Behavioral & emotional wellness services.
• Generous time away from work.