5 of 5 Remote Suricata Jobs

Senior Detection and Response Engineer - UK

Location
Cheltenham, England, United Kingdom
vulnerability drops, you’re the first to dig in, analyze it, and ship detection coverage Preferred Qualifications Experience developing and tuning detections in Suricata, Snort, Zeek, or similar, and writing Nuclei templates or other scanner signatures Experience with streaming systems or real-time data processing Background in high-growth ...

Incident Response Consultant (Remote, GBR)

Location
United Kingdom
investigations to determine the extent and scope of compromise.Network Forensic Analysis: strong knowledge of network protocols, network analysis tools like Bro/Zeek or Suricata, and ability to perform analysis of associated network logs.Reverse Engineering: ability to understand the capabilities of static and dynamic malware analysis.Incident Remediation: strong understanding ...

Professional Services Principal Consultant - Incident Response (Remote, GBR)

Location
United Kingdom
investigations to determine the extent and scope of compromise.Network Forensic Analysis: strong knowledge of network protocols, network analysis tools like Bro/Zeek or Suricata, and ability to perform analysis of associated network logs.Reverse Engineering: ability to understand the capabilities of static and dynamic malware analysis.Incident Remediation: strong understanding ...

Incident Response Sr. Consultant (Remote)

Location
Greater London, England, United Kingdom
determine the extent and scope of compromise.* Network Forensic Analysis: strong knowledge of network protocols, network analysis tools like Bro/Zeek or Suricata, and ability to perform analysis of associated network logs.* Reverse Engineering: ability to understand the capabilities of static and dynamic malware analysis.* Incident Remediation: strong ...

Sr. Exploit Developer (Cheltenham, UK)

Location
Cheltenham, England, United Kingdom
exploits for initial access vulnerabilities, when little or no publicly‐available proof of concept code for exploiting such vulnerabilities exists. Implementing detections (such as Suricata & Snort signatures, YARA rules, etc.) for identifying such initial access vulnerabilities being exploited on the wire. Writing Attack Surface Management (ASM) queries (e.g., Shodan ...