NetEnrich - Implementation Engineer - Cybersecurity

About Company

Job Summary

Responsibilities

• Develop custom parsers to extract and normalize data from diverse sources, including logs, network traffic, and endpoint data.
• Design, develop, and maintain Yara rules for threat detection and malware analysis, ensuring high accuracy and effectiveness.
• Create and implement playbook automation to streamline incident response processes and improve operational efficiency.
• Design and implement data ingestion pipelines to collect, process, and analyze large volumes of security data from various sources.
• Collaborate with cross-functional teams to understand customer requirements and customize cybersecurity solutions to meet their needs.
• Conduct research and analysis to identify emerging threats and vulnerabilities, and develop proactive detection mechanisms.
• Participate in security incident response activities, providing technical expertise and support as needed.
• Stay abreast of the latest cybersecurity trends, technologies, and best practices, and share knowledge with the team.
• Work closely with customers to understand their security challenges and requirements, and provide expert guidance and support.
  

Qualifications

• Bachelor's degree in Computer Science, Information Security, or related field.
• 3 years of experience in cybersecurity, with a focus on data analysis and implementation.
• Strong expertise in developing custom parsers for log and data normalization.
• Proficiency in creating and maintaining Yara rules for threat detection and malware analysis.
• Experience in designing and implementing playbook automation using tools such as Demisto, Phantom, or similar platforms.
• Solid understanding of data ingestion techniques and technologies, including log management systems and data lakes.
• Hands-on experience with SIEM (Security Information and Event Management) solutions such as Splunk, ELK, or QRadar.
• Excellent analytical and problem-solving skills, with the ability to troubleshoot complex technical issues.
• Strong communication and interpersonal skills, with the ability to effectively collaborate with internal teams and customers.
• Relevant cybersecurity certifications (e.g., CISSP, CEH, GIAC) are a plus.