3 of 3 Remote Permanent YARA Jobs

endpoint detection, firewalls and many other technologies - but they can't avoid leaving digital footprints on the networks they traverse. Built on open-source innovations from Zeek, Suricata and YARA and refined through years of real-world use, Corelight transforms network footprints from physical, virtual and cloud networks into actionable insights. Our customers use these insights to speed incident response More ❯

Lead Regulated Engagements: Execute TIBER/CBEST/STAR-FS assessments with technical depth that goes beyond compliance checkboxes Operationalize Intelligence: Transform raw threat data into actionable hunting queries, YARA rules, and Sigma detections Qualities and Expectations We are looking for a Senior Threat Intelligence Analyst who embodies the following qualities and meets these key expectations: Threat Focused: Deep understanding More ❯

threats through comprehensive file analysis and research across web vectors. You will dissect attacker tactics, techniques, and procedures (TTPs), crafting and optimizing detection signatures using industry-standard tools like Yara and ClamAV, as well as Mimecast's advanced proprietary detection technologies. This is an opportunity to leverage vast real-world threat data and transform your technical expertise into tangible protection … What You'll Do: Analyse and classify file and web-based threats, including credential phishing campaigns and a wide range of malware families. Develop, test, and maintain detection signatures (Yara, ClamAV, and proprietary solutions) for both phishing and malware threats targeting Mimecast customers. Dissect malicious files, URLs, and email payloads using static and dynamic analysis tools. Automate threat analysis and … analysis findings. What You'll Bring: Deep technical proficiency in malware and phishing analysis, including hands-on experience with real-world threats. Strong experience writing and tuning detection signatures (Yara, ClamAV, or similar). Advanced scripting and automation skills (Python required; additional scripting languages a plus). Experience with static, dynamic or behavioural analysis of malicious files and URLs. Familiarity More ❯