GreyNoise analyzes Internet background noise to reduce false positive security alerts and identify emerging threats.
Detection Engineer
Location
United States
Posted
36 days ago
Salary
0
Seniority
Senior
Job Description
Detection Engineer
GreyNoise Intelligence
• Write and tune Intrusion Detection System rules grounded in observed network behavior. • Maintain and improve tag coverage and quality: adding new tags, fixing broken ones, and de-duplicating overlaps. • Maintain benign actor classifications and known-scanner lists so non-malicious traffic is accurately labeled. • Resolve accumulated detection issues that degrade data quality for users and customers. • Use internal CLI tooling to lint, test, and deploy detection rules and tags at scale. • Read and analyze packet captures (pcaps) and related network artifacts during routine validation and debugging. • Validate detections against real traffic and own the trade-offs between false positives and false negatives for individual rules. • Triage a steady stream of inbound detection requests, CVEs, and internal coverage questions. The team processes dozens of new items weekly. • Ensure detections are wired correctly end-to-end: from raw data through rule logic to tag output. • Flag edge cases, collisions, and unexpected behavior in tags or rules for deeper follow-up. • Work closely with researchers to keep them focused on longer-horizon projects. • Communicate clearly about what you are working on, blockers, and trade-offs when priorities shift. • Help sales, support, and customer success get faster, clearer answers on detection coverage questions.
Job Requirements
- Demonstrated ability to read and analyze packet captures (pcaps).
- Experience writing or maintaining Suricata rules or similar network detection signatures.
- Comfortable with high context-switching: moving between tags, rules, pcaps, and internal requests throughout the day.
- Strong attention to detail; small mistakes in tags or rules have outsized downstream effects.
- Clear, concise written communication, especially when something is broken, ambiguous, or blocked.
Benefits
- 💵 Equity in a high-growth, Series-A startup
- 👩⚕️ 100% covered health, dental, vision, and life plans for all employees
- 6️⃣ Competitive 401k employer match of 6%, which is special for a startup. This will be 100% matched and vested from day 1
- 🏖 Flexible paid time off. To encourage time off from work and ensure overall employee health and wellness, GreyNoise strongly recommends each employee to take at least 120 hours of PTO (3 weeks) annually, including at least five consecutive business days
- 🌎 Remote-first culture. While we are headquartered in the Washington DC area, we have a distributed workforce -- with the majority of our team working remotely from across the country
- 💻 Equipment budget. Every new employee gets an Apple Mac laptop and a $500 stipend for any equipment accessories.
- 👼 Paid family leave for all employees. We offer 4 months of paid leave (birth or adoption), plus 2 months of optional unpaid leave, so new parents have time to adjust to the new life (and work) schedule
- 📚 Learning & development budget. All employees receive an annual $1,500 towards professional development related to their job function. The stipend can be applied to tuition, books, conferences, and more
- 🌴 Company offsites and monthly local hangouts to encourage team bonding
Related Guides
Related Categories
Related Job Pages
More Engineer Jobs
This is a core Engineering Role ok to take candidate anywhere in the USA who can work in EST time zone Candidate might be asked to travel to Paris every quarter for 1 week based on need of client need It will be nice if Candidate knows French language Duration -12 months Rate – we are open and flexible for right candidate Core responsibilities: Should have experience in CortexA9 -newer version of cortex is preferred. Should have experience in SoCs based on both Cortex‑A and Cortex‑M families. Experience in Cortex‑A9 experience includes multi‑core MMU‑based systems, shared L2 and private L1 cache hierarchies, cache coherency validation, AXI/APB interconnects, DMA, interrupts, power states, and CoreSight/JTAG‑based debug, all implemented in full UVM environments using golden‑model–driven tests and ARM VIP for stress traffic. Experience in Cortex‑M4 and Cortex‑M55–based SoCs, focusing on low‑power architectures, independent cores, measurement flows, and power management. strong end‑to‑end view from ultra‑low‑power microcontroller designs to high‑performance application processors. Assure the overall quality of our designs, which contribute to exciting launches of wireless portable hardware at Snap A strong focus on ARM IPs (cpu (cortex-a v9 arch), gpu (mali), debug (css600, coresight), etc.) where your knowledge and experience will allow us to review architectural/design decisions and ramp up on verification of these blocks Serve as an individual contributor to own and develop the verification of our core IP blocks Ownership throughout the whole project lifecycle, e.g.: Specification reviews, Verification plans, test case development, UVM environments, Coverage (analysis), Debugging, GLS, etc. Work closely with other teams to gather relevant information and share your knowledge about the design to further improve requirements and specifications. As well as providing vital feedback in their debugging efforts Collaborate with the global verification team to improve our processes and launch initiatives to improve the overall quality of the design as well as the way of working to become the best in class verification team Knowledge, Skills and Abilities: Proven (5+ years) hands-on experience with state-of-the-art verification methodologies and processes, such as UVM / SystemVerilog, Formal verification, Constraint-random verification, Assertions, Coverage metrics, Coverage analysis, Gate Level Simulation, Key Performance Indicators testing, etc. Strong understanding of ARM related IPs is required: cpu (cortex-a v9 arch), gpu (mali), debug (css600, coresight), etc. Hands-on experience with designing and implementing C based test-cases to configure and test the ARM IPs as well as the ability to re-use the manufacturer provided test benches
Role Description BMG has an exciting opportunity for a Technical Field Service Controls Engineer who is responsible for the start-up, debug, installation, troubleshooting, repair, and training on all equipment in the customer’s plant and at the manufacturing site when required. We are looking for someone who can work onsite at our Beaverton, MI or Knoxville, TN location but will consider a remote location for the ideal candidate who has 3 years or more experience in the installation and programming of PLCs and Servo Systems for capital equipment. Wage includes hourly base pay with an increased pay scale when traveling or visiting customer sites. Key Duties and Responsibilities - Accomplishes or assists in the installation and start-up of equipment at customer plants as assigned. - Performs preventative maintenance on machines at customer plants as assigned. - Performs training on machines at customer plants as assigned. - Repairs or adjusts machines at customer plants as assigned. - Checks repair work or adjustments by observing machines in operation. - Ascertains that repaired or adjusted equipment is operating in accordance with customer requirements before leaving the customer’s plant. - Assists other BMG employees in activities at customer plants as required in conjunction with service calls. - Suggests modifications or changes in existing equipment based on observations made during service work. - Reviews all spare parts on hand at customer plants and advises customers on necessary spare parts to maintain inventory levels. - May perform repair, adjustment, and/or assembly work on experimental machines located at Brown Machine as assigned. - Prepares service and expense reports and field change service notices for all service calls made. - Briefs engineering and sales personnel involved with a given machine on major changes in the status of the machine observed in the field. - Publicizes and promotes the sale of BMG products whenever the opportunity arises. - Performs programming work to support in-field/warranty/troubleshooting activities as required. - Backfills debug activities on machines located at BMG as required. - Travels to customer sites as required. Qualifications - Prefer an Associate, 2-year trade school certification, or will consider 2 years of relevant experience in lieu of a degree/certification. - A minimum of 3 years’ experience in a manufacturing environment. - Experience in industrial controls including the installation and programming of PLCs and Servo Systems. - Willingness to travel domestically and internationally up to 50% to 75% of the time. - Must possess or be able to secure a valid passport and other documents required for travel. - Must have and maintain a current driver’s license with no restrictions. - A minimum requirement for this position is the ability to work legally in the United States on a permanent basis. No visa sponsorship/support is available for this position. Environment/Physical Requirements - Lift, push, and pull up to 35 to 50 lbs. occasionally. - Frequent bending, reaching, and lifting. - Walk for extended periods of time. - May work in seated or standing positions for prolonged periods of time, performing sustained manual activities at low to moderate levels of exertion. - Must be able to access and navigate within each department at the organization’s facilities (i.e. climb stairs, ladders, etc.). EEO Statement BMG is an Equal Employment Opportunity employer and all qualified applicants for employment will receive consideration for employment without regard for race, color, religion, sex, sexual orientation, gender identity, national origin, disability, protected veteran status, or any other legally protected characteristics. We are committed to working with and providing reasonable accommodation to individuals with disabilities. If you need a reasonable accommodation for any portion of the employment process, please call 989-435-7741 and ask for Human Resources.
Our client is looking for highly motivated graduates who have good computer skills, can learn fast, and want to build a career using the latest technologies in digital design. You do not need to have a background in dentistry. CAD or 3D modeling background in any industry is nice to have. What you need to have is a high degree of motivation to start building a thriving career in this digital age, a great work ethic, and a commitment to grow. Responsibilities - Design dental CAD Full Contour Crowns, Bridges, Split Layers, Veneers, Implants, and Diagnostic wax-ups - Design cases according to Doctors' prescription requests using 3Shape CAD/CAM software - Maintain strong attention to detail to produce high-quality designs that meet doctors' specifications every time - Communicate with our internal team in order to relay design questions or issues to Doctors
Sr Forescout Engineer
ECS Tech IncAll candidates must meet the following criteria: Must be a US Citizen, no dual Citizenships. Must be able to secure a Public trust clearance. Must be able to work across multiple programs across the Federal and DOD space. The core values that ECS looks for in an engagement manager include: Teamwork, Respect, Accountability, Integrity, and Leadership.
Role Description ECS is seeking a Sr Forescout Engineer to work remotely. This role will primarily be remote, however, it will require occasional support for Deployment of Comply to Connect (C2C) at various Army bases, CONUS and OCONUS. We are currently seeking a talented Sr. Forescout Engineer to join our team. This role will provide engineering support and documentation to create a healthy security posture implementing Comply-To-Connect for our delivered Managed Service supporting the US Army. In this role, you will focus on design, integration, and deployment. You will provide tactical and strategic input on improving overall network operations and Network Access Control using Forescout. The selected candidate must be well versed in architectural best practices and applying them across a breadth of technologies to solve an organizational problem. You should be capable of articulating your views on the future development of technology to varying audiences, and you should understand the interaction between infrastructure and solution architecture. - Provide Engineering support for Comply to Connect on multiple DoD networks and classification domains - Establish and maintain network analysis and monitoring tools; including fine-tuning, health reporting and alerting - Make recommendations to optimize stability, availability, reliability and performance of networking infrastructure - Resolve complex networking and other technology issues with multiple parties involved - Develop process and architecture diagrams - Identify and provide technical subject matter expertise on remediation and mitigation of all open findings from DISA STIGs - Provide program status reports and briefings to internal management, senior leadership and government oversight officials - Understanding of enterprise computing environments, distributed applications, and strong knowledge and understanding of TCP/IP networks to include ASA, Palo Alto firewalls, and Cisco, Juniper, and Brocade switches - Advanced Administrator’s level of understanding of Operating Systems (Linux, Windows, Macintosh, and UNIX) is a plus - Computer Networking Systems Administrator’s level Knowledge of all protocol layers - Strong knowledge of enterprise networking environments - Expertise in debugging and root-cause analysis in complex systems and large environments - Experience installing, implementing and debugging network access control security solutions - Understanding of programming languages: C, Java, and Perl - This is a “hands-on” position that requires someone who is capable of multi-tasking - Work well in a team oriented environment and be able to self-manage their tasks to ensure success - Communicate up and down within the organization; prepare detailed descriptions of issues, status updates, recommendations, and reports - Applicants must be organized with an eye for detail Qualifications - Ability to gain interim secret clearance or have secret clearance or better - US Citizen - DoD 8570 IAT II - 6+ yrs. experience working in a DOD environment (Contractor/Civilian/Military), preferably US Army or DISA - Forescout Certified Engineer (FSCE) - Experience with Network Access Controls - Experience with projects across development lifecycles (analysis through implementation) - Ability to multi‐task and effectively prioritize competing requirements - Must be proficient with desktop programs such as MS Powerpoint, MS Excel, MS Word, MS Visio - Must possess a high attention to detail - Good oral and written communications skills - Have networking, telecom, or application development, client/server, network and internet/web development experience - The ability to apply IT industry standards to secure network environment - Experience in creating and maintaining programmatic and technical documentation to ensure efficient planning and execution, ability to manage and document system configurations Benefits - Salary Range: $130,000 - $150,000 - General Description of Benefits


