Threat Intelligence Engineer, Infoblox
Office located in Neuilly, Paris
Secure cloud-managed network services
Job no longer available
Secure cloud-managed network services
1001+ employees
Job no longer available
Office located in Neuilly, Paris
1001+ employees
Company mission
To simplify complex distributed networking and security by delivering modern, cloud-first networking and security services.
Role
Who you are
- You’re the ideal candidate if you are an experienced intelligence or threat researcher who knows and understands DNS (protocols, datasets, tunnelling)
- Bachelor’s Degree in Computer Science or equivalent experience
- Familiarity with AWS technologies and comfort with Python and Command Line Interface
- Knowledge of threat analysis and research, familiarity with leveraging open-source or an equivalent level of experience in statistical analysis with a passion for threat intelligence
- Coding and data skills such as Python, data analysis and statistics, use of notebooks (Jupyter, Databricks)
- Ability to analyse threat signatures in DNS traffic and other data sources to find and identify malicious activity, campaigns, and understand changes in the threat landscape
- Experience using virtual environments for analysis of suspicious sites and files
- Experience writing intelligence reports and presentations
- A collaborative approach, questioning and inquisitive mind, and a drive to learn and employ new tools and techniques
- Experience in network protocol log analysis, preferably in the DNS protocol and/or other complex data sources for threat hunting
- You love to code and build features that help customers understand their network
- You love to analyse malware and malicious documents or sites and create detectors for them
- Individuals with strong logic, correlation, analytical, communication and technical skills; the motivation to continuously learn; and who thrive in a fast-paced, dynamic environment will fit well on our team
What the job involves
- We are looking for a Threat Intelligence Engineer to join our Analysis and Research team in EMEA. In this role, you will contribute to the discovery and assessment of threat indicators that appear in the Domain Name System (DNS), as well as identify, block and track DNS-based infrastructure actors
- You will build subject matter expertise in modern threats and big data technologies to identify, evaluate, and extract new threats, supporting Infoblox capabilities that protect customers all over the world
- Discover threats related to DNS and script algorithms to deliver indicators to protect customer networks
- Contribute workflows, algorithms, and/or enrichments to help customers prioritize and understand threats within their network
- Research, design, develop, and build repeatable analytics, heuristics and rules-based detection around threats, tactics/techniques/procedures (TTPs), and indicator scoring
- Use statistics, and scripting in python and pyspark, to draw insights from very large, diverse data sets
- Analyse structured and unstructured data sets to identify trends and anomalies that could indicate malicious activity
- Collaborate with others of different expertise to address complex threat problems
- Craft reports on discoveries such as threat actors, malware, and campaigns
- After six months you will…
- Contribute to new algorithms to find suspicious or malicious indicators for our products
- Support research and contribute to at least one publication
- Understand our data sources, pipelines, tools, and techniques
- After about a year, you will…
- Collaborate with others to execute threat research projects
- Hone your research and prototyping capabilities to better protect our customers
- Use our data sources to develop new analytics in threat intelligence and prioritization
Our take
Infoblox is widely recognized as a market leader in the security and networking space, particularly in DNS, DHCP and IP address management (DDI). About 70% of the Fortune 500 use Infoblox’s solutions, including Deloitte, GlaxoSmithKline, Nestle, PayPal, Pfizer, and Samsung.
The company has been around since 1999, but a 2016 acquisition by Vista Equity Partners helped bring new investment. Since then, Infoblox has invested heavily in developing next-gen, cloud native applications that the shift to hybrid and remote working has rendered incredibly valuable. It’s been able to open up offices in 21 countries and continuously expand its workforce.
After its latest round of funding led by Warburg Pincus, one of the most active growth investors in enterprise technology and cloud-based platforms, the company’s position as a market leader looks secure.
Kirsty
Company Specialist at Welcome to the Jungle
Insights
7% employee growth in 12 months
Company
Funding (last 2 of 3 rounds)
Apr 2005
$30m
SERIES E
Feb 2004
$21m
SERIES D
Total funding: $53m
Company benefits
- To keep you healthy and strong all year long, we offer medical, vision, and dental benefits for Bloxers and their families (depending on location). In addition, we also offer a total wellbeing solution sure to keep Bloxers feeling their best!
- We have rich time-off policies across the globe which allow all our Bloxers to rest up, recharge and take care of themselves and their loved ones. It’s all about keeping your work schedule and personal life in balance
- Free, confidential, professional assistance anywhere and anytime you need it. Our EAP is here to assist our global Bloxers (and their families) to resolve personal and/or work-related stresses as they arise
- Giving back to our global communities is just as important to us as receiving our benefits. We offer Bloxers 2 full workdays to volunteer in their local communities, and we also match donations to charities
- We have a platform dedicated to Bloxers showing Bloxers appreciation and kudos for outstanding performance and everyday excellence, with recognitions converting into currency for gifts and more
- Our dedicated team operates alongside a world-class education platform to ensure we’re offering all Bloxers the training to keep their hard and soft skills sharp. No matter what your position, we have the track for you!
Company HQ
Santa Clara, California, United States
Leadership
Jesper Andersen
(Independent Board Director)Prior to joining Infoblox in 2014, they worked as Senior Vice President for Network Management at Cisco Systems. Previously they held management roles at Oracle, PeopleSoft, and Pivotal Software.
Salary benchmarks
We don't have enough data yet to provide salary benchmarks for this role.
Submit your salary to help other candidates with crowdsourced salary estimates.
Share this job