Senior Security Engineer, ExtraHop

• You must have a strong understanding of the attack lifecycle and a deep desire to stop attackers before they can do damage
• Bachelor’s degree or equivalent experience in cyber security, computer science, engineering, or network forensics
• Experience in penetration testing, red teaming, or capture the flag competitions that include hands-on execution of attacks and vulnerability exploitation
• Experience in writing or working with signatures (Suricata or Snort) or machine learning intended to detect network-based cyber attacks
• Strong understanding of network security and networking basics, including the OSI model and excellent working knowledge of the key protocols from Layer 2 through Layer 7, including IP, TCP, UDP, and HTTP
• Good communication skills with the ability to clearly communicate in writing technical details about attacks
• Strong working experience in using Wireshark, TShark or other network analysis tools
• Strong working experience with Python or equivalent scripting languages

Desirable

• We are looking for a self-starter that enjoys investigating cyber attacks and how adversaries are traversing the network for lateral movement
• Reproduce and analyze network-based cyber attacks, including vulnerability exploitation and lateral movement
• Communicate in writing research findings to detection engineering and collaborate in writing detectors to detect cyber attacks
• Mentor and teach less experienced security engineers about cyber attacks, malware analysis, vulnerabilities research, or other areas of expertise
• Work with management and other team members to improve analysis and detector development processes
• All R&D Employees will be required to attend 2 mandatory in-person events every year of approx. 4 days duration