Cybersecurity Threat Researcher (Position located in Cheltenham, United Kingdom)

To learn more about our team and office culture in England (UK), visit the following links. 
Careers Page: https://www.knowbe4.com/careers/locations/york
Glassdoor: https://www.glassdoor.com/Location/KnowBe4-York-Location-EI_IE969384.0,7_IL.8,12_IC3297365.htm
LinkedIn: https://www.linkedin.com/company/knowbe4/life/uk/

The Cybersecurity Threat Researcher works in the KnowBe4 Threat Research Lab, and is responsible for deploying and configuring various security products and solutions such as endpoint, email, web and network protection.

Responsibilities:

• Analysing trends and patterns in large data-sets to establish threat trends across regions, industries and business segment sizes.
• Have a passion for cyber security and thrive on solving difficult and complex problems.
• Have a genuine interest in mitigating phishing attacks and be familiar with recent vulnerabilities in our space. Investigate phishing emails and have an understanding of Malware Analysis (Configuration of isolated Malware Analysis VM, Identification of File Formats, Basic Static & Dynamic analysis)
•  Enjoy sharing their knowledge and working with team members and external stakeholders.
• An understanding and experience with Threat Actor Tools and techniques: (MITRE ATT&CK Framework, PowerShell & Command Prompt Terminals, WMIC, Scheduled Tasks, SCM, Windows Domain and host Enumeration Techniques, Basic Lateral Movement Techniques, Basic Persistence Mechanisms, Basic Defense Evasion Techniques, other offensive/Red Team TTPs)
• Triage, investigate, and respond to alerts coming in from the Knowbe4 email platform efficiently and without support.
• Contribute regularly to external-facing Knowbe4 Threat Labs content such as blogs.

Requirements:

• BS or equivalent plus 3 years experience
• MS or equivalent plus 1 year experience
• Well versed with IOCs, reverse engineering and threat campaign tracking
• Experience in malicious URL and phishing Email analysis
• Script enabled for scripting automations (Python) for handling huge volumes of threat artifacts like files, emails, URLs etc
• Experience with public speaking and triaging complex customer queries.