Senior Cyber Security Analyst

Description

The company builds bot defense and anti-malvertising technology for the AdTech industry, serving SSPs, DSPs, agencies and publishers through scalable protection platforms, customizable reporting tools and API integrations.

The team works on real-time threat detection and bot mitigation for enterprise-scale clients, and analysts work directly with customers using advanced analytics platforms to find malicious traffic and stop it.

The role combines threat analysis, traffic investigation and detection engineering, and involves working with high-volume traffic datasets to spot suspicious behavior and improve detections for bots, fraud attempts and other web-based threats.

Responsibilities

• Watch for security threats and dig into them with Kibana/OpenSearch and Snowflake.
• Review security logs for odd activity, such as traffic spikes, shifts in attack patterns, and attack signals that appear or vanish.
• Decide whether activity is malicious or benign and pick the right response, which may include detection engineering to block harmful traffic.
• Build, tune and roll out detection rules using traffic behavior, HTTP request attributes, headers, device fingerprints and other indicators.
• Check that existing detections and known attack patterns still work, and flag unusual changes in volume, sources, IPs, domains or other indicators.
• Help onboard customers by studying their web application traffic and setting up baseline detection and protection rules.
• Look into customer-reported incidents and missed detections, analyze the attack traffic, and apply fixes that widen protection coverage.
• Record new threats and attacks, with evidence, findings and indicators.
• Pass findings to Engineering and other stakeholders with the technical detail they need to remediate and improve detection and protection.
• Work with counterparts through a ticketing system and support portal to investigate issues, post updates and close security requests.

Requirements

• You have 3, 5 years of experience in cybersecurity, threat research or threat intelligence.
• You hold a bachelor's degree in computer science, cybersecurity, information security or a related field.
• You understand web technologies and networking well, including HTTP/HTTPS, TCP/IP, DNS, authentication, cookies and browser-server interaction.
• You have worked in web security research, bot management, fraud detection or closely related areas.
• You have hands-on experience with threat investigations, IOC analysis and threat intelligence research.
• You have used log analysis and investigation platforms such as Kibana/OpenSearch, Snowflake, Datadog or similar tools.
• You write strong SQL, including on large datasets and with UDFs.
• You know basic JavaScript for web and client-side analysis.
• You are a strong analytical and problem solver.
• You can run investigations independently with little supervision.
• You communicate and collaborate well.
• You are keen on cybersecurity and keep learning.
• You know MITRE ATT&CK, malware analysis, vulnerabilities and adversary TTPs.
• You have OSINT and cyber threat intelligence research experience.
• You have used Python and Jupyter Notebook for investigations and automation.
• You have experience with GitHub and version control workflows.
• Additional Information

Conditions

Equal opportunity applies to all candidates.