Engineer (Implementation)

SCWX) is a global cybersecurity leader that secures human progress with Secureworks® Taegis™, a SaaS-based, open XDR platform built on 20+ years of real-world threat intelligence and research, improving customers’ ability to detect advanced threats, streamline and collaborate on investigations, and automate the right actions. We enjoy competitive compensation and benefits packages, and reward and recognize our employees for exceptional results. We offer flexible work options when available, and emphasize the importance of work-life balance. The CTU Detection Engineer will be responsible for performing detail-oriented work that involves security threat analysis of various malware and web attacks across the entire Secureworks’ landscape and introducing those learnings into the Taegis platform. The successful candidate must be a strong practitioner in the security field with proven technical skills and experience researching, hunting for, and responding to advanced threat actors. As a member of a highly trained security research team – The Counter Threat Unit (CTU™) - the candidate will contribute technical leadership for client-focused projects, generate high-confidence threat detection, and contribute to the development of advanced technologies and processes to detect threat actors, enhancing protections for our Taegis customers. Transform new and emerging threat research into actionable detection measures, leveraging creative countermeasure development techniques and detection tooling. Discover how a threat manifests on the endpoint and research how to detect that threat in network, endpoint and application telemetry. Serve as a subject matter expert in key elements of the practice to other departments, including marketing, product management, and the broader Counter Threat Unit research team. Static and dynamic malicious code analysis Reverse engineering IA32/64 architecture binaries designed for popular operating systems (Windows, OSX, Linux). Reverse engineering mobile ARM architecture binaries. Data Analysis and Programming Scripting PowerShell, Bash, Python and foundational programming skills. Hands on Experience with popular Python data science packages such as Numpy, Pandas, and Matplotlib. Familiarity with CI/CD pipelines, testing and automation. Forensic analysis of collected evidence artifacts Analysis of memory images from common OS types. Analysis of disk images that may involve various file systems (NTFS, FAT, EXT, HFS+...) Network traffic analysis Identifying detectable traits of threat network traffic. Broad analysis of traffic patterns to identify anomalies. Event log analysis. Inspection of log data from common operating systems and security infrastructure to identify threat activity and piece together an incident. Typically requires 8+ years of related experience in a professional role with a Bachelor’s degree; or 6+ years with a Master’s degree; or 3+ years with a PhD; All employment decisions at Secureworks are based on business needs, job requirements and individual qualifications, without regard to race, color, religion or belief, national, social or ethnic origin, sex (including pregnancy), age, physical, mental or sensory disability, HIV status, sexual orientation, gender identity and/or expression, marital, civil union or domestic partnership status, past or present military service, family medical history or genetic information, family or parental status, or any other status protected by the laws or regulations in the locations where we operate.