3 of 3 YARA Jobs in the UK

analysis and reverse engineering Deep expertise across enterprise SIEM platforms and EDR tooling (CrowdStrike knowledge a strong advantage) A well-developed threat hunting toolkit: YARA rules, IOC development, timeline analysis and adversary profiling Cloud investigation experience - Azure and/or AWS incident response, log analysis and cloud-native threats ...

enterprise SIEM platforms (e.g., Microsoft Sentinel, Splunk, Chronicle/SecOps). Must be proficient in writing/reviewing advanced detection logic (KQL, SPL, or YARA rules). Deep execution knowledge of generating, managing, and analyzing Software Bills of Materials (SBOMs using frameworks like CycloneDX or SPDX) and integrating them with ...

Requests for Information (RFIs) from internal and external stakeholders, delivering timely, actionable intelligence.Tool Development and Detection:Develop and maintain detection signatures such as YARA rules based on malware analysis and threat research. Identify network and host-based detection opportunities.Manage and optimise threat intelligence platforms, sources, and feeds to improve analysis … triage-level malware analysis, including behavioural analysis, sandbox detonation, and basic static analysis. Exposure to reverse engineering tools is beneficial but not essential.Experience developing YARA rules and other detection signatures based on technical analysis.Familiarity with programming or scripting languages such as Python for developing analysis tools, automation, and data processing.Experience ...