Sonoco
From Sonoco's careers page
Status: listed on the employer's own careers page when we last checked (daily). Confirm on their site before applying.
Plan, conduct, and document iterative, hypothesis-based threat hunts.
Analyze and investigate anomalies for potential risk across the full spectrum of cyber threats.
Review and analyze Security Information and Event Management (SIEM) alerts to develop hunt hypotheses.
Propose, discuss, and document custom searches for automated detection of threat actor activity based on hunt findings.
Utilize open-source intelligence to inform hunt hypothesis development.
Track and document cybersecurity incidents from detection to resolution.
Provide computer forensic support during investigations, including evidence seizure, computer forensic analysis, and data recovery.
Conduct malware analysis including static and dynamic analysis of complex malware.
Proactively assess the compute environment for patterns and anomalies, tagging events for Tier 1 & 2 monitoring.
Collect and analyze data from compromised systems using EDR agents and custom scripts.
Attend daily Agile Scrum meeting and report progress on activities.
Support the development of deliverables including Hunt Hypotheses, Hunt Reports, Detection Logic, and Incident Reports.
Respond to cybersecurity major incidents and assist with mitigation, remediation, and post incident reviews.
Minimum of 5 years of experience in cybersecurity threat hunting or incident response roles.
Proficiency with threat hunting methodologies, tools, and techniques.
Experience with IT Service Management ticketing systems (ServiceNow preferred).
Strong understanding of cloud-based and non-cloud-based applications such as Microsoft Azure, Microsoft O365, Microsoft Active Directory.
Advanced knowledge of Security Information and Event Management (SIEM) systems.
Experience with Endpoint Detection and Response (EDR) agents such as CrowdStrike.
Ability to conduct malware analysis, including static and dynamic analysis.
Excellent communication and teamwork skills.
Bachelor’s degree in computer science, computer engineering, software engineering, cybersecurity, or related field.
Cybersecurity focused certifications such as GCIA, GSEC, GMON, Security+
5-8 years
We are an equal opportunity employer, and we strictly prohibit and do not tolerate discrimination against employees, applicants or any other covered persons because of race, color, religion, national origin or ancestry, sex, pregnancy, sexual orientation, marital status, gender identity or expression, age, disability, genetic information, veteran status, or any legally protected characteristic.
Scores your resume against this job the way resume scanners do: the job's hard and soft skills, searchability, recruiter tips and formatting.
Create a free account to see your score. Your resume stays in this browser until then, and we never store it.
Already a member? Sign in