Home

Cyber Threat Investigator - QY7475Y9 at AMS Accelerate IT

Location: Riverside, CA, US

Job Summary:

Job Duties:
- Stay updated on information security threats.
- Create rules based on CIS benchmarks.
- Understand tactics, techniques, and indicators of compromise.
- Develop multi-layered countermeasures for NDR and cloud products.
- Write rules for detecting malicious network activities.
- Document findings and author blog posts on malware analysis.

Required Skills (Keywords):
- YARA/Snort/Suricata
- Bash scripting
- Network fundamentals (HTTP, SMTP, DNS, SMB)
- Network packet analysis (Wireshark)
- Adversary tactics and techniques

Required Experiences (Topics):
- Cybersecurity industry background
- Incident response and documentation
- Malware detection/prevention rule creation
- Reverse engineering (preferred)

Job URLs: