Cyber Security Engineer (Cyber Threat)

Join Amaris as a Cyber Threat Engineer where you will be able to fulfill your career expectations in a fast-growing organization. Being a consultant at Amaris Consulting means positioning yourself as a technical and functional expert in an industrial field but, above all, being an ambassador of our organization to clients thanks to: Your interpersonal skills and ability to listen in order to build a strong relationship of trust with our clients and fully understand their challenges and issues. Your curiosity and eagerness to learn as we support over 1,000 clients from all sectors worldwide.

Key Responsibilities:

• Threat Hunting: Proactively search for threats within the enterprise environments, identifying and mitigating malicious activities before they cause damage.
• Development and Maintenance of Detection Rules: Create and adjust detection rules for tools like Microsoft XDR, focusing on anticipating and countering attacker tactics.
• Threat Research and Analysis: Investigate the latest threats and attack techniques to improve detection capabilities, with a deep understanding of offensive methodologies used by attackers.
• Collaboration with Incident Response Teams: Work closely with the Incident Response team to implement solutions that mitigate detected threats, including offensive strategies to contain and neutralize attacks.
• Behavioral Analytics and Anomaly Detection: Utilize offensive techniques to identify unusual behaviors that may indicate ongoing attacks.
• Malware Analysis: Apply knowledge of malware analysis tools and techniques to understand and counteract attacks.
• Cloud and Network Security: Leverage practical experience with cloud security tools and in-depth knowledge of networks to effectively identify and respond to threats.

Profile Requirements:

• Experience:
• Minimum of 3-5 years in cybersecurity roles, such as Threat Hunter or Detection Engineer.
• Demonstrated success in developing and refining detection mechanisms in enterprise environments.
• Relevant Certifications: One or more of the following certifications is required:
• Certified Red Team Professional (CRTP) or expert (CRTE)
• Certified Azure Red Team Professional (CARTP) or expert (CARTE)
• OffSec Certified Professional (OSCP)
• Technical Skills:
• Strong expertise in threat hunting and advanced detection technologies.
• Proficiency in creating and maintaining detection rules for tools like Microsoft XDR.
• Deep understanding of threat intelligence sources and their application in detection strategies.
• Scripting skills in Python, PowerShell, or Bash for automating security tasks.
• Hands-on experience with cloud security tools (e.g., AWS GuardDuty, Azure Security Center).
• In-depth knowledge of IP networks, firewalls, IDS/IPS, and packet analysis.
• Strong knowledge of Linux and Windows internals, including log analysis and common attack vectors.
• Familiarity with open-source tools like Zeek, Falco, Wireshark, and OSQuery.
• Knowledge of malware analysis tools and techniques.

Amaris Consulting is proud to be an equal-opportunity workplace. We are committed to promoting diversity within the workforce and creating an inclusive working environment. For this purpose, we welcome applications from all qualified candidates regardless of gender, sexual orientation, race, ethnicity, beliefs, age, marital status, disability, or other characteristics.