Defiant

Security Analyst

• Assist customers with support questions related to our product and investigate site intrusions.
• Repair infected sites and remove all traces of compromise; determine how the intrusion occurred and remove the intrusion vector.
• Collect and process evidence from intrusions and collect all IOCs (indicators of compromise).
• Work with Threat Intelligence team on vulnerability research and malware signature development.
• Triage and validate vulnerability reports submitted through the Bug Bounty Program: assess impact, reproduce and analyze vulnerabilities in controlled environments, and identify root causes in source code.
• Document findings, recommend fixes or custom firewall rules, and propose bounty amounts based on severity and impact.
• Collaborate with developers, customer support, and disclosure teams; validate that patches are sufficient once released.
• Use tools and workflows including Slack, FogBugz, GitHub, and Google Apps.

Security Analyst, Infected Websites