- Job Type: Full-Time
- Function: Business Intelligence
- Industry: Cybersecurity
- Post Date: 09/12/2023
- Website: www.esentire.com
- Company Address: 451 Phillip St, Suite #135, Waterloo Ontario, CA, N2L 3X2
About eSentireeSentire is the Authority in Managed Detection and Response, protecting the critical data and applications of 1200+ organizations in 75+ countries from known and unknown cyber threats. Founded in 2001, the company’s mission is to hunt, investigate and stop cyber threats before they become business disrupting events.
eSentire, Inc. is the Authority in Managed Detection and Response, protecting the critical data and applications of 2000+ organizations in 80+ countries, across 35 industries from known and unknown cyber threats.
Founded in 2001, the company’s mission is to hunt, investigate and stop cyber threats before they become business-disrupting events. Combining cutting-edge machine learning XDR technology, 24/7 Threat Hunting, and proven security operations leadership, eSentire mitigates business risk and enables security at scale.
The Team eSentire difference means enterprises are protected by the best in the business with a named Cyber Risk Advisor, 24/7 access to SOC Cyber Analysts, Elite Threat Hunters, and industry-leading threat intelligence research from eSentire’s Threat Response Unit (TRU). eSentire provides Managed Risk, Managed Detection and Response and Incident Response services.
The Global Security Operations Centre (GSOC) is central to eSentire’s Service Delivery Organization (SDO). This organization delivers comprehensive security services to clients worldwide on a 24x7 basis. The successful candidate will perform Tier I security analysis tasks across network, endpoint, log and cloud security in a fast-paced and dynamic environment.
Tier I Responsibilities
Analyze incoming security signals in real time with a balance of accuracy and speed using a variety of forensic tools
Apply investigative tools, techniques and procedures (TTPs), use your understanding of the security threats associated with the incoming signals and follow defined runbooks to determine and execute the relevant actions
Perform whitelisting/filtering of false positive signals
For confirmed true positive signals, you will alert clients using defined templates and escalate high priority alerts to clients by phone
Block malicious network traffic and isolate infected hosts on customers networks
Add malicious IOC’s to eSentire’s Global Blacklist for all customers where appropriate.
Complete basic-intermediate client support requests/queries assigned by the operations lead. Work directly with clients via email/phone as needed to complete these tasks
Handle some service administration and troubleshooting tasks
Relevant degree in Computer Science, IT Security, IT Management, IT Support or related discipline or up to 3+ years equivalent experience. Degree course or industry experience must include a strong focus on networking and security.
Keen interest in Cyber Security with foundational knowledge of network and endpoint security technologies including;
Intrusion Detection Systems (IDS), Snort/Suricata
Packet Capture (PCAP) Analysis using Wireshark
Windows system internals, basic knowledge of PowerShell
Linux Kernel and basic scripting (Bash/Python) knowledge
Analytical mind with strong attention to detail and a commitment to quality of service
Strong customer facing written and verbal communication skills with the ability to effectively communicate complex security concepts with end customers.
Natural ability to thrive in a fast-paced and time sensitive environment
Ability to work in an operational/shift-based environment with flexible working hours to include evenings and weekends
Why a Career with eSentire?
Our Culture: At eSentire we work in a collaborative and innovative work environment. We work with brilliant and passionate people who strive and encourage others to do their best. eSentire’s idea-rich environment welcomes creative and sometimes unconventional perspectives!
Growth Opportunities: At eSentire you will have the opportunity to grow and make an impact from your work. We encourage innovation in all who become a part of our team. With growing operations internationally, there are many lateral and upward advancement opportunities for rewarding and developing careers with eSentire. We’re strong believers in continuing education and provide the resources that you need to continue learning.
Employee Perks: We provide breakfast, snacks and refreshments (at our physical office locations in Waterloo, London, and Cork), flexible working hours and vacation, company-wide equity and bonus programs, subsidies for continuing education and health & wellness, and attractive compensation and benefits plans. We make it our obligation to the team to stay current with compensation trends in the tech field!
We thank all applicants in advance for applying. Only individuals selected for interviews will be contacted.
eSentire is committed to creating a fair work environment that is aligned with the Accessibility for Ontarians with Disabilities Act (AODA). We guarantee equal treatment and provide opportunities regardless of race, creed, color, religion, national origin, ancestry, marital status, affectional or sexual orientation, gender identity or expression, disability, nationality, sex, status as a protected veteran or any other legally protected grounds and will not discriminate on these basis. If you have any accessibility requirements during the recruitment process, please reach out to our HR team at firstname.lastname@example.org and any accommodation needs will be addressed upon request.