Cyber Incident Response/Customer Security Operations - SkillBridge Intern

At Zscaler, the Red Canary Cyber Incident Response Team (CIRT) continues to push the boundaries of threat detection and response with a unique combination of operations, threat research, and engineering in tight integration with the development team that designs our analysis platform and the Red Canary Threat Detection Engine. The security landscape is always shifting and introducing new adversaries. The Red Canary CIRT operates 24/7 to track down threats using the entirety of our customer’s data and deliver fast and practical detections to our customers. Together, we create a customer-centric culture that fosters success, adoption, and continuous growth.

Zscaler believes that training the Skillbridge Candidates on how to GET the job is just as important as how to DO the job. During the Candidate’s time with the Red Canary product team, they will be assigned a Skillbridge Mentor. This mentor will be selected from our pool for Canary Veterans, and will be responsible for the following:

• Using Red Canary’s detection platform to analyze EDR telemetry, alerts, and log sources across several detection domains (Endpoint, Identity, SIEM, Cloud/SaaS, etc.)
• Publishing threats for customers using concisely-written communication while effectively conveying key and important indicators
• Detector Development: Researching coverage opportunities then creating new detectors, and tuning existing ones
• Improving the CIRT workflow through orchestration automation

What We’re Looking for (Minimum Qualifications)

• Cybersecurity operational experience with a focus in Managed Detection and Response
• Candidate must be located in the United States during their Skillbridge time
• Have 180 days of service or fewer remaining prior to your date of discharge and you have at least 180 continuous days of active service.
• Obtain approval from your unit commander
• MOU must be approved and submitted before start

What Will Make You Stand Out (Preferred Qualifications)

• Experience with EDR tools
• Experience conducting Incident Response activities
• Malware/Threat Analysis experience
• Detection Engineering experience
• Exposure to Cloud and Identity technologies