Models (LLMs) to reduce SOC toil - using AI to summarise complex alerts, auto-generate YARA-L detections, or build... using YARA-L. Manage the lifecycle of these rules and configurations using IaC principles for version control. SOAR...
Models (LLMs) to reduce SOC toil - using AI to summarise complex alerts, auto-generate YARA-L detections, or build... using YARA-L. Manage the lifecycle of these rules and configurations using IaC principles for version control. SOAR...
and tune detections (e.g., SIEM/SOAR, EDR) using intelligence signals (TTPs, behaviors, YARA/Sigma where applicable). Produce... behaviors) and creation of detections (e.g., Sigma/YARA) is a plus. Experience producing finished intelligence products...
Models (LLMs) to reduce SOC toil - using AI to summarise complex alerts, auto-generate YARA-L detections, or build... using YARA-L. Manage the lifecycle of these rules and configurations using IaC principles for version control. SOAR...
Models (LLMs) to reduce SOC toil - using AI to summarise complex alerts, auto-generate YARA-L detections, or build... using YARA-L. Manage the lifecycle of these rules and configurations using IaC principles for version control. SOAR...
monitoring or investigations Malware report analysis or malware triage Detection logic, VirusTotal rules, YARA or similar...
languages and tools (PowerShell, Python, VB, Yara) Working knowledge of TCP/IP and related networking concepts. Prior...
and Detection: Develop and maintain detection signatures such as YARA rules based on malware analysis and threat research. Identify... developing YARA rules and other detection signatures based on technical analysis. Familiarity with programming or scripting...
with Security Information and Event Management (SIEM) Systems, ideally, Google Chronicle, and YARA-L Strong understanding of Cloud...
y evolución de los casos de uso implementados, desarrollo y mantenimiento de reglas yara, etc Administración y operación... y amenazas: YARA-L, STIX, Sigma, Yaml, etc. Conocimiento en operación de soluciones de tipo SIEM, correladores de logs y eventos...