Work In Tech

About eSentire

eSentire, Inc. is the Authority in Managed Detection and Response, protecting the critical data and applications of 2000+ organizations in 80+ countries, across 35 industries from known and unknown cyber threats.

Founded in 2001, the company’s mission is to hunt, investigate and stop cyber threats before they become business-disrupting events. Combining cutting-edge machine learning XDR technology, 24/7 Threat Hunting, and proven security operations leadership, eSentire mitigates business risk and enables security at scale.

The Team eSentire difference means enterprises are protected by the best in the business with a named Cyber Risk Advisor, 24/7 access to SOC Cyber Analysts, Elite Threat Hunters, and industry-leading threat intelligence research from eSentire’s Threat Response Unit (TRU). eSentire provides Managed Risk, Managed Detection and Response and Incident Response services.

The Global Security Operations Centre (GSOC) is central to eSentire’s Service Delivery Organization (SDO). This organization delivers comprehensive security services to clients worldwide on a 24x7 basis. The successful candidate will perform Tier I security analysis tasks across network, endpoint, log and cloud security in a fast-paced and dynamic environment.

Tier I Responsibilities

• Analyze incoming security signals in real time with a balance of accuracy and speed using a variety of forensic tools
• Apply investigative tools, techniques and procedures (TTPs), use your understanding of the security threats associated with the incoming signals and follow defined runbooks to determine and execute the relevant actions
• Perform whitelisting/filtering of false positive signals
• For confirmed true positive signals, you will alert clients using defined templates and escalate high priority alerts to clients by phone
• Block malicious network traffic and isolate infected hosts on customers networks
• Add malicious IOC’s to eSentire’s Global Blacklist for all customers where appropriate.
• Complete basic-intermediate client support requests/queries assigned by the operations lead. Work directly with clients via email/phone as needed to complete these tasks
• Handle some service administration and troubleshooting tasks

Requirements

• Relevant degree in Computer Science, IT Security, IT Management, IT Support or related discipline or up to 3+ years equivalent experience. Degree course or industry experience must include a strong focus on networking and security.
• Keen interest in Cyber Security with foundational knowledge of network and endpoint security technologies including;
• Intrusion Detection Systems (IDS), Snort/Suricata
• Packet Capture (PCAP) Analysis using Wireshark
• Windows system internals, basic knowledge of PowerShell
• Linux Kernel and basic scripting (Bash/Python) knowledge
• Analytical mind with strong attention to detail and a commitment to quality of service
• Strong customer facing written and verbal communication skills with the ability to effectively communicate complex security concepts with end customers.
• Natural ability to thrive in a fast-paced and time sensitive environment
• Ability to work in an operational/shift-based environment with flexible working hours to include evenings and weekends