Apply on Employer Site

Allstate · 2 days ago

Senior Threat Hunter

United States

Full-time

Remote

Senior Level

$96K/yr - $171K/yr

5+ years exp

Allstate is a company dedicated to protecting families and their belongings from life's uncertainties. They are seeking an experienced Senior Threat Hunter to perform intelligence-driven network defense, support monitoring and incident response capabilities, and advise leadership on vulnerabilities and solutions. This role involves analyzing large amounts of data, mentoring teams, and collaborating on threat hunting techniques.

BankingFinanceFinancial ServicesInsuranceInsurTechVenture Capital

No H1B

Responsibilities

Design and run custom analysis models on security event information to discover active threats

Identify (hunting) security nuances and abnormalities in the environment

Develop use cases and actionable content to identify security issues that are currently not alerted within the environment

Lead projects and assignments

Provide custom tool design to assist in analysis and investigations

Perform as an Information Security resource in three or more of the following areas:

+ Threat Intelligence

+ Incident Response

+ Log analysis (statistical modeling, correlation, pattern recognition, etc.)

+ Microsoft platform (Server, workstation, applications)

+ Open Systems platforms (Linux, UNIX, VMWare ESX, Nutanix)

+ Web Application

+ Networking (firewalls, IDS/IPS, packet capture)

+ Databases (Oracle, SQL Server, DB2, IMS)

+ SIEM

+ Reverse Engineering / Malware analysis

Collaborate and support teammates and outside teams with regard to threat hunting techniques/issues

Communication/build rapport with other divisions and various peers

Identify needs, drive solutions, and provide guidance in an autonomous manner

Qualification

Threat HuntingIncident ResponseSIEMPenetration TestingCyber Threat IntelligenceScriptingEDRAnalytical SkillsCommunication SkillsLeadership Skills

Required

5+ years overall technical experience in threat hunting, threat intelligence, incident response, security operations, or related information security field

2+ years' experience in penetration testing, ethical hacking, exploit writing, and/or vulnerability management

Bachelor's and/or Master's Degree in IT Security, Engineering, Computers Science, or related field/experience

Deep understanding of common network and application stack protocols, including but not limited to TCP/IP, SMTP, DNS, TLS, XML, HTTP, etc

Advanced experience with security operations tools, including but not limited to: SIEM (e.g., Splunk, ArcSight), Network analysis (e.g., Net Witness, Palo Alto), Signature development/management (e.g., Spunk rules, Snort rules, Yara rules), EDR solutions (e.g., CrowdStrike, Tanium, Defender)

Broad experience with various common security infrastructure tools (NIDS, HIPS, EDR, etc.)

Scripting experience related to system administration and security operations (Python, Bash, PowerShell, Perl, C/C++)

Excellent analytical and problem-solving skills, a passion for research and puzzle-solving

Strong communication (oral, written, presentation), interpersonal and consultative skills

Leadership and mentorship skills

Preferred

Experience hunting in AWS and/or Azure environments

Deep understanding of large, complex corporate network environments

Strong knowledge or experience in penetration testing, ethical hacking, exploit writing, and/or vulnerability management

Knowledge or experience in application design/engineering, including but not limited to programming/scripting, Windows/Linux system administration, RDBMS/NoSQL database administration, etc

Recent experience with malware analysis and reverse engineering

Obtained certifications in several of the following: SANS GIAC courses, CEH, CISSP, OSCP, or tool-specific certifications