Cyber Security Research Eng. 3 (Phishing & Threat Analytics

Position: Cyber Security Research Eng. 3 (Phishing & Threat Analytics)
# Cyber Security Research Eng. 3 (Phishing & Threat Analytics)
Apply
** Job#: 3043812
***
* Job Description:

** Cyber Security Research Engineer
** Phishing, Threat Analytics & Incident Response
** Location* Charllotte, NC / Dallas, TX / Minneapolis, MN / Chandler, AZ / Des Moines. IA, Raleigh, NCJob Summary The Cyber Security Research Engineer is responsible for the research, analysis, detection, disruption, and mitigation of phishing threats and advanced cyber attacks targeting employees, customers, and enterprise systems. This role serves as a key contributor within Threat Analytics, Cyber Threat Intelligence, Incident Response, and Security Operations functions.

The ideal candidate will possess strong expertise in phishing detection, threat hunting, security analytics, incident response, digital forensics, and adversarial analysis. This individual will leverage enterprise security tools, develop detection logic, investigate cyber threats, and provide actionable recommendations that improve the organization's security posture.

This role requires a highly analytical and investigative mindset with the ability to think like an adversary, identify emerging attack techniques, and develop scalable solutions to detect and mitigate future threats.

Key Responsibilities
** Phishing Detection & Threat Analytics
*** Play a key role in phishing disruption efforts impacting customers, employees, and the company brand.
* Develop and enhance detection logic, processes, and procedures used to identify phishing campaigns and threat actor activity.
* Review, analyze, and correlate security logs from multiple data sources.
* Create and maintain detection content including:  + Regular Expressions  + YARA Rules  + Threat Detection Logic  + Security Analytics Content
* Identify indicators of compromise (IOCs), malicious domains, phishing infrastructure, suspicious URLs, and threat actor patterns.
* Support cyber threat intelligence and threat hunting initiatives.
* Leverage large-scale security analytics and threat intelligence techniques to identify, investigate, and disrupt cyber threats.
* Develop cybersecurity reporting, threat metrics, and operational dashboards supporting security leadership.
** Incident Response & Digital Forensics
*** Lead or participate in computer security incident response activities for moderately complex security events.
* Conduct technical investigations involving:  + Phishing Incidents  + Malware Activity  + Credential Theft  + Account Compromise  + Insider Threat Activity
* Perform post-incident digital forensics to identify attack vectors, root cause, scope, and remediation requirements.
* Analyze endpoint, network, email, identity, and security telemetry to support investigations.
* Document investigative findings and provide recommendations for future prevention.
* Collaborate with security operations, engineering, risk, and threat intelligence teams to improve response capabilities.
** Threat Hunting & Offensive Security Research
*** Utilize offensive security methodologies and adversarial techniques to improve detection and response capabilities.
* Apply attacker-focused thinking to identify emerging threats and develop hunting strategies.
* Research threat actor tactics, techniques, and procedures (TTPs).
* Support vulnerability analysis, cyber threat investigations, and security research initiatives.
* Conduct analysis involving:  + Exploitation Techniques  + Vulnerability Research  + Security Assessments  + Adversary Emulation  + Threat Simulation Activities
* Develop proof-of-concept methodologies and custom techniques to assess security controls and improve threat detection capabilities.
** Security Monitoring & Detection Engineering
*** Utilize enterprise security platforms to investigate and respond to security events, including:  + SIEM Platforms  + IDS/IPS Technologies  + Endpoint Security Solutions  + Email Security Gateways  + Web Security Gateways  + Security Detection and Mitigation Devices
* Develop automated detection capabilities, security analytics, YARA rules, and alerting logic.
* Improve phishing detection and threat monitoring through security automation and enhanced detection engineering.
* Identify detection gaps and recommend improvements to monitoring capabilities.
* Support integration and optimization of enterprise security tools and monitoring technologies.
** Security Risk Assessment & Security Engineering
*** Perform security risk assessments and technical reviews to ensure compliance with corporate security standards and best practices.
* Identify security vulnerabilities, control gaps, and areas of elevated risk.
* Evaluate remediation alternatives and recommend long-term mitigation strategies.
* Provide security consulting and guidance to internal business and technology teams.
* Support enterprise security engineering programs involving:  + Application Security  + Vulnerability Management  + Threat Modeling  + Security Assessments  + Security Control Validation  + Security Monitoring
* Assist with…