MDR Security Analyst (Threat Hunting)
Cato Networks
Welcome to the future of cloud networking and security!
Cato Networks is the first company to converge enterprise networking and security into one centralized and global service that is delivered by cloud. It is led by networking and security pioneer Shlomo Kramer (Check Point, Imperva) and early investor (Palo Alto Networks, Exabeem, Trusteer and more). Cato’s unique technology inspired a brand-new product category, later named “SASE” by Gartner and a market expected to reach $25 billion by 2027.
This is your opportunity to get on the rocket ship and join a company that is building a cutting-edge enterprise network and secure cloud platform, and is on a fast track to becoming the worldwide market leader – don’t miss it!
We are seeking a highly energetic and talented security analyst to join Cato Networks' Managed Detection and Response (MDR) team. As an MDR security analyst, your primary responsibility will be to identify and respond to security threats across our service customers. You will utilize the groundbreaking Cato Threat Hunting System to proactively seek out unknown threats and enhance Cato Network hunting capabilities. Leveraging the Cato Cloud data warehouse, you will develop logics and signatures to effectively detect and address security threats. Moreover, you will serve as a trusted advisor to our MDR service clients, providing valuable insights into their security posture and the threat landscape they face
This position offers an exceptional opportunity for network security enthusiasts who are passionate about Network Security, Malware Analysis, Threat Hunting, and Threat Intelligence.
Responsibilities
- Act as a Customer Security Advisor, conducting threat-hunting activities and performing security assessments on customer networks. Effectively communicate findings, recommendations for remediation, and mitigation strategies to customers
- Serve as an escalation point for the SOC analysts, assisting in the investigation, analysis, and response to security incidents
- Develop cyber kill-chain indicators of an attack and hunting heuristics to enhance the ongoing threat-hunting process
- Enhance the product accuracy and its capacity to detect emerging threats within the dynamic security landscape
Requirements and skills
- Proven hands-on experience in the cybersecurity industry
- Excellent customer service skills
- Strong knowledge of networking architecture and protocols, including TCP/IP, DNS, SSL, SMB, HTTP, IP Routing, etc.
- Comprehensive understanding of the cybersecurity landscape, common threats, and attack scenarios, such as malware infections, command and control (C&C) communication, drive-by attacks, phishing, and network scans
- Practical experience with security technologies, including firewalls (FW), intrusion prevention systems/intrusion detection systems (IPS/IDS), antivirus (AV), security information and event management (SIEM) systems, endpoint protection, and network forensics tools
- Analytical mindset, capable of formulating hypotheses and validating them through in-depth analysis and technical evidence
- Fluent in English with exceptional communication skills
- Proficiency in at least one scripting language such as Python or Ruby
- Advantageous: Experience with Extended Detection and Response (XDR) solutions
- Advantageous: Previous experience working in Managed Security Service Provider (MSSP) or Managed Detection and Response (MDR) providers as a Threat Hunter or Security Analyst
- Ability to work effectively as a team player, demonstrating responsibility and strong organizational skills
Education
- Advantage – BSc. in Computer Science, Information technology, Mathematics or similar