Responsibilities
- Analyze network traffic to identify and document threat patterns.
- Develop and maintain network-based security signatures in Suricata.
- Use offensive security tools and techniques to simulate attacks and generate sample network traffic.
- Collaborate with data scientists and security researchers to support detection efforts and improve detection accuracy.
- Monitor and assess the effectiveness of network detections and adjust them as needed.
- Contribute to threat hunting by identifying attackers’ new tactics, techniques, and procedures.
- Participate in incident response activities as required.
Requirements
- 4–6 years of cybersecurity experience, preferably focused on threat detection and response.
- Expertise writing signatures with Suricata.
- Advanced knowledge of common operating systems, services, networking protocols, logging, cloud environments, and SaaS environments.
- Knowledge of attacker techniques and tools such as Metasploit and Cobalt Strike, plus operational experience using threat intelligence to detect and respond to adversaries.
- Familiarity with detection data such as PCAPs, flow logs, and cloud logs.
- Proficiency with bash, Python, Sigma, YARA-L, Linux/Unix, Wireshark, and related languages and frameworks.
- Scripting, software development, engineering, and/or DevOps experience, including experience with a source control system such as Git.
- Optional certifications include OSCP, GCIA, GCDA, and GSEC.
- Strong technical, communication, and collaborative skills.
Benefits
- Comprehensive total rewards package including health care insurance, income protection and life insurance, retirement savings plans, behavioral and emotional wellness services, generous time away from work, and an employee recognition program.
- Eligibility for an incentive plan and participation in an employee equity plan with stock options.
- Benefits vary by location.
About Vectra
Vectra AI is the cybersecurity AI leader in protecting modern networks from modern attacks. The Vectra AI Platform delivers real-time visibility into network activity, clear insight into which behaviors matter most, and the ability to act before risk becomes impact. By connecting and analyzing activity across on-premises, multi-cloud, identity, SaaS, edge, and IoT/OT environments, Vectra AI helps organizations reduce exposure, accelerate detection and response, and automate security operations with AI. Backed by more than a decade of AI and machine learning innovation and a portfolio of 39 cybersecurity AI patents, Vectra AI empowers security teams to stay ahead of emerging AI-powered attacks, improve operational efficiency, and demonstrate resilience in an increasingly complex, AI-driven world. Recognized as a Leader in the 2026 Gartner® Magic Quadrant™ for Network Detection and Response (NDR) for the second consecutive year. Learn more at vectra.ai.