Detection Engineer

  • R10219
  • Prague, Czechia

Rapid7’s Threat Intelligence & Detection Engineering (TIDE) team is built from the ground up to provide our customers with high-fidelity threat detections and alerting that limit threat actor dwell time and impact across our customers' ecosystems. Our TIDE team uses purposeful research, threat intelligence curation, observed malicious behavior, and informed collaboration to ensure that our detections evolve along with the ever-changing threat and technological landscape. 


 

About the Role


As a Threat Intelligence & Detection Engineer, you will be responsible for the upkeep and evaluation of the detection library for the MDR service. Our team’s mission is to empower excellence in our customer’s security posture by  continuously refining Rapid7’s detection library, enhancing their effectiveness to swiftly identify incidents while reducing analyst strain. Our vision is to lead with an unparalleled, state-of-the-art, and globally recognized detection library to set new standards in cybersecurity. You will collaborate closely with the SOC and Data Science teams to identify patterns of activity to improve detections, assist with the creation of new data models, and constantly update the collective understanding of threats. 

In addition, you will learn from IR engagements, SOC incidents, and a variety of other sources and apply that knowledge to inform new detections for use across our customer base. You won't be alone in this endeavor, and your TIDE colleagues will be there to answer questions, provide guidance, and assist you as you develop.

In this role, you will:

  • Utilize Rapid7’s world-class software and threat intelligence to improve the current InsightIDR detection library.

  • Collaborate closely with SOC Analysts, the Data Science team, Incident Response (IR) Consultants, Customer Advisors, and security researchers.

  • Assist in researching of attacker behaviors and techniques using information gathered from IR engagements, minor incidents and malicious activity discovered through various telemetry sources. 

  • Conduct detection testing in a controlled environment.

  • Use a variety of skills to build rules that detect evil across network, endpoint and cloud services.

The skills you’ll bring include:

  • 3+ years as a SOC Analyst/Incident Responder/Offensive security practice experience OR 2+ years of cyber threat intelligence/research/detection engineering experience.

  • A solid understanding of how threat actors utilize tactics such as lateral movement, privilege escalation, defense evasion, persistence, command and control, and exfiltration.

  • Experience with hands-on analysis of forensic artifacts and/or malware samples.

  • Experience writing standard EDR detections (Sentinel One/Crowdstrike/Defender), advanced search/threat hunting queries, or use case rules (Splunk or equivalent tool).

  • Ability to research, analyze, and interpret threat intelligence data from various sources and translate the information into actionable detection rules

  • Strong writing and verbal skills for communicating information in a manner that is easily understood by both technical and non-technical individuals

  • Effective collaboration between different teams.

  • Innovative problem solving mindset.

We know that the best ideas and solutions come from multi-dimensional teams. That’s because these teams reflect a variety of backgrounds and professional experiences. If you are excited about this role and feel your experience can make an impact, please don’t be shy - apply today.

About Rapid7


At Rapid7, we are on a mission to create a secure digital world for our customers, our industry, and our communities. We do this by embracing tenacity, passion, and collaboration to challenge what’s possible and drive extraordinary impact.
 

Here, we’re building a dynamic workplace where everyone can have the career experience of a lifetime. We challenge ourselves to grow to our full potential. We learn from our missteps and celebrate our victories. We come to work every day to push boundaries in cybersecurity and keep our 10,000 global customers ahead of whatever’s next.
 

Join us and bring your unique experiences and perspectives to tackle some of the world’s biggest security challenges.

#LI-SIM

Security and Compliance
Rapid7 is committed to keeping customers secure. As a first line of defense, all employees are expected to uphold the highest standards of security and privacy, ensuring the protection of sensitive information and compliance with relevant regulations.

Apply Now

Not You?

We have emailed you a code to verify your identity. Please check your spam/junk folder if you don't receive the email in your inbox.

Application loading...

 

Jobs you may be interested in

MSSP Customer Success Advisor

R10472 Belfast United Kingdom Belfast, United Kingdom Customer Success Sales Full_time JOB_LEVEL-3-13
As a Rapid7 Customer Success Advisor (CSA), you will act as a trusted advisor for our MSSP customers and use your cyber security knowledge and expertise of R7 products and solutions to ensure customers maximise the value from their R7 investment. ...

Senior DevOps Engineer

R10347 Prague Czechia Prague, Czechia Product & Engineering Development Engineering Full_time JOB_LEVEL-3-24
About the Role: Rapid7 is seeking a Senior DevOps Engineer to join our team and play a pivotal role in developing a solution for detecting, analyzing, and remediating threats across the clear, dark, and deep web. You will contribute to creating a ...

Incident Handler, Detection & Response Services

R9994 Arlington VA United States Arlington, VA, United States Security Services Professional Services Full_time JOB_LEVEL-3-24
We’re looking for an Incident Handler who brings urgency to real threats and clarity to false alarms. In this role, you’ll work closely with our customers to investigate suspicious activity, acting as a critical bridge between our MDR and Incident...

Senior DevOps Engineer - Platform Delivery

R9197 Belfast United Kingdom Belfast, United Kingdom DevOps Engineering Development Engineering Full_time JOB_LEVEL-3-24
At Rapid7, you'll join a world class team of thinkers and problem solvers building a modern security platform. We're seeking a highly motivated team member to help ensure our platform is secure, reliable and available for thousands of customers th...

Apply Now

Not You?

We have emailed you a code to verify your identity. Please check your spam/junk folder if you don't receive the email in your inbox.

Application loading...