Position: Security Researcher R&D
Company: UnderDefense
Category: Security
Experience required: 2y
English level: upper
Published: 2021-11-01T00:00:00+02:00

**Responsibilities**

— Research latest CERT and industry reports, Threat intel analytics and TTP. Drive product vision
— Analyze trends/threats and run new EVIL samples in our awesome LAB
— Analyze attacks patterns, fingerprints, anomalies and new ransomware techniques 
— Research & Develop new threat algorithms to detect it on the scale during Lateral Movement in-stream analytics platform
— Maintain an isolated test/lab environment to run the latest malicious activities and generate artifacts (telemetry, reports, docs, manuals, pcap)
— Consult the development team on implementing new features and functionality for product
— Run and automate attacks and simulations to assure detections works as expected 
— Analyze and convert from SIGMA to new detection format
— Cooperate with our Red team to run some of complex attacks

**Experience**

— If you were in the Malware analysis team for few years or with Red team it is awesome. You are our candidate
— Experience with MITRE and how SOC team works and react – will help a lot
— Hands on with CobalStrike, PowerShell Empire, Powersploit, metasploit, AutoSploit, venom, Pivotsuite, Responder
— Seen on practice DGA & Command and Control (C2) console
— In-depth knowledge of network protocols WinRM, WMI, HTTP/S, SMB, DNS, ICMP, TCP/UDP
— Fundamental understanding of security tools such as SIEM, IDS/IPS, Web Proxies, DLP, CASB, SIEM, DNS security, DDoS protection, and firewalls
— Knowledge of Microsoft Windows systems including active directory and Unix systems.
— Knowledge of attack vectors, threat tactics and attacker techniques. — — Experience applying Mitre ATT&CK matrix.
— Experience analyzing and inspection log files, network packets, and any other security tool information output from multiple system types
— Familiar with basic reverse engineering principles and understand of malware, rootkits, TCP/UDP packets, network protocols

**Nice To Have**

— FlareON badges or OSCP
— Strong python skill
— English and good idea communication skill
— Demonstrable attention to detail, creative problem-solving, and persistence in your work product
— Work comfortably in a fast-paced, multi-tasking environment

**We offer:**
— Sign-on бонус $2000
— Training and career development programs  
— Knowledge sharing sessions
— Branded souvenirs
— Internal training and workshop
— Comfortable workplace & office equipment
— Opportunities for self-realization and career growth
— 18 days of paid vacations & 5 days of paid sick leaves
— Quarterly Team building & corporate events (2 grand events per year)
— Guaranteed regular compensation review
— On-demand Knowledge Evaluation and promotion
— English language courses
— Medical insurance with pretty much good coverage for you to feel safe