<p>Location: Remote</p><br/><p>Employment Type: Full-time</p><br/><p>Team: Detection Engineering</p><br/><div><b style="font-size: 18px">Who We Are</b></div><div><span style="font-size: 11pt">Red Canary was founded to create a world where every organization can make its greatest impact without fear of cyber threats. We’re&nbsp;a cyber security company who protects, supports and empowers organizations to make better security decisions so they can focus on their mission without fear of cyber threats. </span></div><div><br></div><div><span style="font-size: 11pt">The combination of our market-defining technology and expertise prevents breaches every day and sets a new standard for partnership in the industry. We’re united in our commitment to customers and grounded in our values, which earned us a place on the Forbes Best Start-up Employers 2022 list.&nbsp; If our mission resonates with you, let’s talk.</span></div><div><br></div><div><b style="font-size: 18px">What We Believe In</b></div><div>- Do what’s right for the customer</div><div>- Be kind and authentic</div><div>- Deliver great quality</div><div>- Be relentless </div><div><br></div><div><b style="font-size: 18px">Challenges You Will Solve</b></div><div><span style="font-size: 16px">The Cyber Incident Response Team (CIRT) continues to push the boundaries of threat detection and response with a unique combination of operations, threat research, and engineering in tight integration with the development team that designs our analysis platform and the Red Canary Threat Detection Engine.</span></div><div><br></div><div><span style="font-size: 16px">The security landscape is always shifting and introducing new adversaries. The Red Canary CIRT operates 24/7 to track down threats using the entirety of our customer’s data and deliver fast and practical detections to our customers.</span></div><div><br></div><div><span style="font-size: 16px">This is not a role where you are encouraged to passively accept the current state. At Red Canary, you are empowered to actively look for opportunities to automate repetitive and tedious tasks. We let the automation framework handle the mundane tasks, so that you can remain focused on solving complex and critical problems for our customers. </span></div><h3>What You'll Do</h3><br/><ul><li>Use Red Canary’s detection platform to analyze EDR telemetry, alerts, and log sources across several detection domains (Endpoint, Identity, SIEM, Cloud/SaaS, etc.)</li><li>Publish threats for customers using concisely-written communication while effectively conveying key and important indicators</li><li>Detector Development: Research coverage opportunities then create new detectors, and tune existing ones.</li><li>Improve the CIRT workflow through orchestration &amp; automation</li><li>Provide mentorship to your peers and communicate effectively with others for efficient cross-team collaboration</li></ul><br/><h3>What You'll Bring</h3><br/><ul><li>Analysis experience and proficiency in one or more of the following functional areas: Endpoint (MDR), Cloud/SaaS, Identity, Email, SIEM</li><li>Proven experience with automation and orchestration to effectively handle an extreme volume of telemetry and logs in a timely and efficient manner</li><li>Strong written communication skills, and abilities to work in a team-centric environment</li><li>Strong analytical thought-process and critical thinking skills to translate disparate activity into the realm of threat analysis</li><li>Open-source intelligence research skills used in a fast-paced operational environment, and the ability to apply those findings within the analytical workflow to identify threats</li><li>Experience leveraging Mitre ATT&amp;CK framework, and&nbsp; familiarity with other alternative attack frameworks and threat models</li><li>Familiarity with backend data structures used for security analysis (JSON, YAML, etc.)</li><li>Experience using query languages and understanding syntax across EDR or other security platforms (SQL, K, Lucene, etc.)</li><li>Experience creating and tuning&nbsp; detectors/rules using commonly known tools such as YARA, SIGMA, Snort, Splunk, Elastic, etc.</li></ul><br/><h3>Bonus Points</h3><br/><ul><li>You enjoy impacting the Infosec community through writing blogs, participating in webinars, and presenting at conference talks</li><li>Experience using version control software for the deployment of detectors, rules, or other automations (GitHub, CircleCi, etc)</li><li>Previous Red Team experience</li></ul><br/><div><span style="font-size: 16px">Targeted base salary range: $95,400 - $107,000  + bonus eligibility and equity depending on experience</span></div><div><br></div><div><b style="font-size: 16px">**this person must be okay working a 12pm to 10pm MT shift, Wednesday - Saturday. </b></div><div><br></div><div><i style="font-size: 16px">Benefit Highlights:</i></div><div><i style="font-size: 16px">-&nbsp;100% Paid Premiums:&nbsp;</i><b style="font-size: 16px"><i>&nbsp;</i></b><i style="font-size: 16px">Red Canary offers a 100% paid plan option for medical, dental and vision for you and your dependents. No waiting period.</i></div><div><i style="font-size: 16px">- Health &amp; Wellness -&nbsp;Access to mental health services, Employee Assistance Program and additional programs to incentivize healthy habits.&nbsp;&nbsp;</i></div><div><i style="font-size: 16px">- Fertility Benefits: All new hires are eligible for benefits as of their first day.</i></div><div><i style="font-size: 16px">- Flexible Time Off: Take the time you need to recharge including vacation, sick, bereavement, jury duty, and holidays.&nbsp;</i></div><div><i style="font-size: 16px">- Paid Parental Leave-&nbsp;Full base pay to bond/care for your new child.</i></div><div><i style="font-size: 16px">- Pre-Tax Plans -&nbsp;Red Canary offers a variety of plans to fit you and your dependent specific needs including FSA, HRA and HSA, with employer funding to offset out of pocket health care expenses.&nbsp;</i></div><div><i style="font-size: 16px">- Flexible Work Environment-&nbsp;With 60% remote workforce, Canaries can work virtually from almost anywhere in the US.</i></div><div><br></div><div><i style="font-size: 16px">The application deadline is August 9th, 2024.</i></div><div><br></div><div><b style="font-size: 18px">Why Red Canary?</b></div><div>Red Canary is where people embody our mission to improve security outcomes for all. People work hard to maintain a culture that encourages authenticity in order to do your best work. Our people are driven and committed to finding the best security outcomes, delivering real and actionable answers, and being transparent along the way.&nbsp;</div><div><br></div><div>At Red Canary, we offer a very rich benefits program to our full-time team members so they can focus on their families and improving our customers’ security. For a full list of benefits, please review our Benefits Summary:</div><div>https://resource.redcanary.com/rs/003-YRU-314/images/RedCanary_2024BenefitsSummary.pdf?version=0</div><div><br></div><div><i>Individuals seeking employment at Red Canary are considered without regard to race, color, religion, national origin, age, sex, marital status, ancestry, physical or mental disability, veteran status, gender identity, or sexual orientation.</i></div>

Location: Remote

  

Employment Type: Full-time

  

Team: Detection Engineering

  

 **Who We Are**

Red Canary was founded to create a world where every organization can make its
greatest impact without fear of cyber threats. We’re a cyber security company
who protects, supports and empowers organizations to make better security
decisions so they can focus on their mission without fear of cyber threats.

  

The combination of our market-defining technology and expertise prevents
breaches every day and sets a new standard for partnership in the industry.
We’re united in our commitment to customers and grounded in our values, which
earned us a place on the Forbes Best Start-up Employers 2022 list.  If our
mission resonates with you, let’s talk.

  

 **What We Believe In**

\- Do what’s right for the customer

\- Be kind and authentic

\- Deliver great quality

\- Be relentless

  

**Challenges You Will Solve**

The Cyber Incident Response Team (CIRT) continues to push the boundaries of
threat detection and response with a unique combination of operations, threat
research, and engineering in tight integration with the development team that
designs our analysis platform and the Red Canary Threat Detection Engine.

  

The security landscape is always shifting and introducing new adversaries. The
Red Canary CIRT operates 24/7 to track down threats using the entirety of our
customer’s data and deliver fast and practical detections to our customers.

  

This is not a role where you are encouraged to passively accept the current
state. At Red Canary, you are empowered to actively look for opportunities to
automate repetitive and tedious tasks. We let the automation framework handle
the mundane tasks, so that you can remain focused on solving complex and
critical problems for our customers.

### What You'll Do

  

  * Use Red Canary’s detection platform to analyze EDR telemetry, alerts, and log sources across several detection domains (Endpoint, Identity, SIEM, Cloud/SaaS, etc.)
  * Publish threats for customers using concisely-written communication while effectively conveying key and important indicators
  * Detector Development: Research coverage opportunities then create new detectors, and tune existing ones.
  * Improve the CIRT workflow through orchestration & automation
  * Provide mentorship to your peers and communicate effectively with others for efficient cross-team collaboration

  

### What You'll Bring

  

  * Analysis experience and proficiency in one or more of the following functional areas: Endpoint (MDR), Cloud/SaaS, Identity, Email, SIEM
  * Proven experience with automation and orchestration to effectively handle an extreme volume of telemetry and logs in a timely and efficient manner
  * Strong written communication skills, and abilities to work in a team-centric environment
  * Strong analytical thought-process and critical thinking skills to translate disparate activity into the realm of threat analysis
  * Open-source intelligence research skills used in a fast-paced operational environment, and the ability to apply those findings within the analytical workflow to identify threats
  * Experience leveraging Mitre ATT&CK framework, and  familiarity with other alternative attack frameworks and threat models
  * Familiarity with backend data structures used for security analysis (JSON, YAML, etc.)
  * Experience using query languages and understanding syntax across EDR or other security platforms (SQL, K, Lucene, etc.)
  * Experience creating and tuning  detectors/rules using commonly known tools such as YARA, SIGMA, Snort, Splunk, Elastic, etc.

  

### Bonus Points

  

  * You enjoy impacting the Infosec community through writing blogs, participating in webinars, and presenting at conference talks
  * Experience using version control software for the deployment of detectors, rules, or other automations (GitHub, CircleCi, etc)
  * Previous Red Team experience

  

Targeted base salary range: $95,400 - $107,000 + bonus eligibility and equity
depending on experience

  

 ****this person must be okay working a 12pm to 10pm MT shift, Wednesday -
Saturday.**

  

 _Benefit Highlights:_

 _-  100% Paid Premiums: _ ** _ _** _Red Canary offers a 100% paid plan option
for medical, dental and vision for you and your dependents. No waiting
period._

 _\- Health & Wellness - Access to mental health services, Employee Assistance
Program and additional programs to incentivize healthy habits.  _

 _\- Fertility Benefits: All new hires are eligible for benefits as of their
first day._

 _\- Flexible Time Off: Take the time you need to recharge including vacation,
sick, bereavement, jury duty, and holidays.  _

 _\- Paid Parental Leave-  Full base pay to bond/care for your new child._

 _\- Pre-Tax Plans -  Red Canary offers a variety of plans to fit you and your
dependent specific needs including FSA, HRA and HSA, with employer funding to
offset out of pocket health care expenses. _

 _\- Flexible Work Environment-  With 60% remote workforce, Canaries can work
virtually from almost anywhere in the US._

  

 _The application deadline is August 9th, 2024._

  

 **Why Red Canary?**

Red Canary is where people embody our mission to improve security outcomes for
all. People work hard to maintain a culture that encourages authenticity in
order to do your best work. Our people are driven and committed to finding the
best security outcomes, delivering real and actionable answers, and being
transparent along the way.

  

At Red Canary, we offer a very rich benefits program to our full-time team
members so they can focus on their families and improving our customers’
security. For a full list of benefits, please review our Benefits Summary:

https://resource.redcanary.com/rs/003-YRU-314/images/RedCanary_2024BenefitsSummary.pdf?version=0

  

 _Individuals seeking employment at Red Canary are considered without regard
to race, color, religion, national origin, age, sex, marital status, ancestry,
physical or mental disability, veteran status, gender identity, or sexual
orientation._

