Team Lead Network Attack Research Group

Threat Hunting

Threat intelligence

Team Lead Network Attack Research Group

For what we need you:

• Research and ensure effective detection of network threats - identify, study and reproduce current and prospective attacks, exploitation of vulnerabilities and attacker techniques, with priority on the most dangerous and actively exploited threats, and maintain a high Detection Rate in various market testing solutions.
• Managing development of network attack detection technologies - define technological development, drive key initiatives and coordinate their implementation in NDR and NGFW products together with development teams and related expert units.
• Expert support for products and business — preparation of analytical materials, participation in public speaking and expert events, support of pilots and tenders, as well as consultation of product and technical teams on issues of network attacks and their detection.
• Leadership and development of the expert team — managing team priorities and results, developing expertise of specialists, distribution of responsibilities and forming a unified approach to researching and detecting network attacks.

Technical background:

• Deep understanding of network technologies, protocols and modern methods of conducting network attacks;
• Knowledge of approaches and technologies for detecting network attacks - IDS/IPS, AV, signature-based, behavioral and anomaly analysis.
• Management skills - task setting and decomposition, prioritization, timing estimation, managing expectations and execution control.
• Ability to work under a large number of tasks, including sudden and urgent
• Strong analytical and communication skills, ability to manage risks and build interactions with related teams. Ability to work in a team and build connections with other departments, communicative.
• Technical English at least at Intermediate level (ability to communicate in writing at minimum)

Nice to have:

• Familiarity with MITRE ATT&CK Framework;
• Familiarity with Kaspersky Lab products such as KATA/NDR, NGFW, OSMP;
• Understanding of concepts such as Threat Intelligence, Sandbox, EDR, MDR, XDR;
• Skills in malware analysis and its reverse engineering. Proficiency with tools for disassembly, decompilation, debugging, network traffic analysis - IDA Pro, Hiew, Wireshark and others;
• Knowledge of at least one scripting language (Python, PowerShell) or C#.