Associate Technical Advisor, BlueVoyant

• Strong collaboration and interpersonal skills, especially in distributed team environments
• Excellent written and verbal communication skills; ability to explain complex topics clearly
• Experience with intrusion detection/prevention systems and SIEM software
• Experience in scripting languages (e.g., Python, PowerShell) and familiarity with other high-level languages (e.g., C, C++, Go, Java)
• Experience in digital forensic analysis and blue team operations
• Knowledge of pen testing and red team operations
• Ability to analyze event logs and identify signs of cyber intrusions/attacks
• Ability to manage high-pressure situations productively and professionally
• Experience working directly with customers to understand and provide feedback on security services
• Ability to work effectively with a globally distributed team
• Skills in creating signatures for security tools
• Experience in areas such as SIEM, Packet Analysis, SSL Decryption, Malware Detection, HIDS/NIDS, Network Monitoring Tools, Email Security, Data Loss Prevention, Anti-Virus, Network Access Control, and Encryption
• Bachelor's degree in Information Security, Computer Science, or a related IT field required. Exceptional candidates with proven experience in security/network operations will also be considered

Desirable

• BlueVoyant is seeking a Threat Fusion Cell Technical Advisor to support our global customers in managing their IT security
• As part of a dynamic team, you will assist customers in minimizing the impact of security incidents while ensuring the continuity of critical business operations
• Assist clients in testing and tuning detection logic to reduce false positives and alert fatigue
• Conduct research on exploits and vulnerabilities likely to affect BlueVoyant customer environments
• Support customer escalations and provide documentation to enable our teams and customers to self-service answer TFC related inquiries
• Provide technical insights and assist in the development of technical and operational processes for the TFC
• Maintain awareness of the current threat landscape