Security Detections Engineer Lead, Cloudflare

• At least 5 years experience in one of the following:
• Analyzing, tracking and defending against phishing attacks
• Incident detection and response
• Intrusion analysis
• Cyber threat hunting
• Penetration testing
• Network defense
• Endpoint forensics
• Experience leading a team and/or several projects
• Working knowledge of email authentication protocols, and experience in email header analysis
• Experience in rule configuration and using a comprehensive data analysis platform
• Experience with detection development using YARA
• Working knowledge of OSI Layers, DNS, SMTP/SMTPS, TCP/UDP, HTTP/HTTPS
• Familiarity with regular expressions and their practical application in tracking malicious activity
• Working knowledge of SQL and devising SQL queries
• Ability to understand the latest security trends as they relate to email-borne threats
• A passion for analyzing attacker TTPs at varying levels
• Familiarity with the cyber threat landscape, cyber intelligence, and working knowledge of threat actors and their techniques
• Experience tracking and analyzing cyber campaigns utilizing technical Indicators of Compromise (IOCs)
• Ability to synthesize technical information and document it in a non-technical manner through both graphical and verbal representation
• Capable and comfortable communicating actionable threat intelligence to both technical and executive-level stakeholders
• Great oral and written communications skills
• One of the following:
• BS in Computer Science, Information Technology, Information Security, Computer Security, Information Systems or related discipline, OR
• Military or industry training and experience in cyber intelligence, general intelligence studies, security studies, or related discipline
• Desire to learn and improve
• Willing and eager to share knowledge, and mentor

Desirable

• As a Lead Security Detections Engineer, your analytical thinking and quick action will be the key to our success
• You will identify Tactics, Techniques, and Procedures (TTPs) of ongoing and ever-evolving cyber attacks to protect our global customer base
• You will work in close collaboration with team members to develop new and innovative ways to present and interact with our unique insights. You will stop the adversary