Sr. Security Analytics Engineer - Rules (HYBRID)
, and security intelligence. Key Responsibilities: Develop and optimize queries using Kusto Query Language (KQL), Yara-L and SQL...
, and security intelligence. Key Responsibilities: Develop and optimize queries using Kusto Query Language (KQL), Yara-L and SQL...
Chronicle, YARA/YARA-L, BigQuery, SOAR platforms, and scripting languages like Python. Drawing on 3-5 years of experience...
-grade with appropriate monitoring, documentation, and maintenance processes Develop and maintain YARA rule infrastructure... intelligence concepts including IOCs, YARA rules, and threat correlation techniques Have experience integrating external APIs...
-on experience in social engineering testing and analysis preferred Experience creating and managing YARA rule sets desired...
of this work is the production of actionable intelligence, the creation of robust detection signatures (e.g., YARA), and providing... reports documenting malware capabilities, mitigation strategies, and recommended defensive actions Develop and maintain YARA...
., finance, healthcare, government) Proficiency in programing and query languages (e.g., PowerShell, Python, SQL, Yara, FQL...
, and deploy custom detection rules (SIEM queries, YARA, EDR logic) to enhance detection accuracy and coverage. Analyze adversary...
platforms (e.g., Splunk, Sentinel), EDR, IDS/IPS, network traffic analysis tools (e.g., Zeek, Suricata, Yara), and cloud...
activity. Expertise in constructing complex search queries using languages such as SPL, YARA, and other query languages...
). ​Proficiency in creating detective content (e.g., SIEM correlation rules, Snort/YARA signatures) and supporting the deployment...