Sr. Threat Hunter, Cyber Security

Summary

Are you ready to grow your career by taking on a new role at Bell? We always look for qualified internal applicants within our own team to support their development.

Corporate Services is at the centre of the action, providing the support that enables Bell’s industry leadership. Our Corporate Security & Responsibility, Communications, Human Resources, Procurement & Value Creation and Real Estate teams work collaboratively to drive our corporate strategy forward.

Do you know someone who would be perfect for this opportunity? If you refer a qualified candidate who is not a current Bell employee and they are hired, you may be eligible to receive a referral bonus!  Simply look for the referral hashtag in the job description to see if this role qualifies.

About the Role

Bell is currently seeking an experienced candidate for a position within the SOC and Fusion Centre team.  Reporting to the Senior Manager – Threat Hunting, this person is tasked to participate in threat hunting activities, including log and network traffic analysis, malware behaviour and reverse engineering analysis, and understanding threat TTPs and how they apply to Bell and its subsidiaries. The candidate should be an independent, critical thinker skilled in analyzing data while working effectively with other internal and external teams to conduct cyber investigations. The candidate must also be able to work in high pressure situations for extended periods of time as a core member of Bell’s Cyber Incident Response Team (CIRT).

Key Responsibilities

• Proactive Threat Detection: Conduct systematic searches through networks, endpoints, and datasets to identify advanced threats that could compromise organizational security.
• Data Analysis: Utilize advanced analytics and threat intelligence to analyze network traffic, logs, and other data sources for signs of malicious activity.
• Hypothesis-Driven Investigations: Develop and test hypotheses regarding potential threats based on emerging trends or known indicators of compromise.
• Collaboration: Work closely with Security Operations Centre operational (SOC) teams and other cybersecurity professionals to ensure timely response and mitigation of identified threats.
• Incident Response: Assist in the updating of incident response plans based on findings from threat hunting activities.
• Reporting: Create detailed reports on threat findings, including recommendations for improvements in security practices and technologies.
• Continuous Improvement: Engage in ongoing learning about new threats, tools, and techniques to enhance threat hunting capabilities

We are looking for the following critical skills & experience

• Education: Bachelor’s degree in Computer Science, Cybersecurity, or a related field is preferred.
• Experience: Minimum of 3 years in cybersecurity roles, with some experience in either threat hunting or threat intelligence is preferred.
• Technical Proficiency: Strong understanding of cybersecurity principles, tactics, techniques, and procedures (TTPs), as well as familiarity with SIEM (Security Information and Event Management), EDR (Endpoint Detection and Response), NDR (Network Detection and Response) and SOAR (Security Orchestration, Automation, and Response) platforms. Proficiency in at least one scripting language (e.g. Python). Experience in log analysis and network traffic analysis, including Netflow.
• Analytical Skills: Excellent problem-solving abilities with a keen attention to detail; Strong skills in data analytics to recognize patterns and anomalies in large datasets are crucial.
• Communication Skills: Strong written and verbal communication skills to effectively convey findings to both technical and non-technical stakeholders. Working effectively within teams to share insights and strategies is crucial.

Preferred Capabilities and Soft Skills

• Experience in malware analysis and reverse engineering is an asset
• Passionate about the importance of security, and want to collaborate with colleagues who need your expertise.
• Have a love of technology as not only a job but a hobby as well.
• Value truth, openness, and pursuing excellence.
• Ability to reliably and ensure things tasks done.
• Ability to give and receive open and direct feedback.
• Strong organizational skills with the ability to prioritize and execute in a methodical and disciplined manner, including a proven track record of successfully managing and executing on short term and long-term projects.
• The ability to think quickly but methodically, to design and implement potentially non-traditional solutions for data analysis.