Blackpoint Cyber is a technology-focused cybersecurity company headquartered in Maryland, USA. The company was established by former US Department of Defense and Intelligence security experts and leverages its real-world cyber experience and knowledge of malicious tradecraft to help MSPs safeguard their infrastructure and operations. 

Offering the only world-class, nation state-grade cybersecurity ecosystem, Blackpoint serves the MSP community using its own proprietary security operations and incident response platform, SNAP-Defense, which is available as a product or as a True Managed Detection and Response (MDR) service. Blackpoint not only detects breaches earlier than any other solution on the market, but its dedicated MDR security analysts work 24/7 to combine network visualization, insider threat monitoring, anti-malware, traffic analysis, and endpoint security in one rapidly deployed service to monitor and detain threats before it's too late.  
 
In addition to its MDR services, Blackpoint is launching LogIC, its new logging with integrated compliance service to help MSPs and their clients satisfy cyber compliance requirements, including assessments and audits. With simple push-button setup, LogIC’s hyper-efficient logging architecture and self-service web application allows you to generate compliance reports and manage all aspects of event and log collection. Streamline how you prepare for audits and know exactly where you are already covered without compromising your security posture.  
 
Blackpoint Cyber continues to work hard to deliver an end-to-end, effective cybersecurity ecosystem to the MSP community. The mission? Provide absolute, unified detection and response services for MSPs of all sizes to combat a constantly changing threat landscape. 

We’re winning the unfair fight. Are you? Learn more at www.blackpointcyber.com.

Blackpoint Cyber

Blackpoint Cyber is the leading provider of world-class cybersecurity threat hunting, detection and remediation technology. Founded by former National Security Agency (NSA) cyber operations experts who applied their learnings to bring national security-grade technology solutions to commercial customers around the world, Blackpoint Cyber is in hyper-growth mode,  fueled by a recent $190m series C round. Why Blackpoint?   Ready to give some hackers hell? On the Blackpoint Cyber Team, we win the unfair fight while helping others protect what’s most important to them. Simply put, our team takes out the adversaries before they see us coming. Join us today and help put the bad guys in their place for good.   Blackpoint Cyber was built by former US Department of Defense and Intelligence security experts focused on stopping malicious tradecraft and safeguarding MSP operations. Our mission? Provide absolute and unified Managed Detection and Response services to organizations across the world.       Company Culture   On this team, we value high-quality execution, ownership, and strong morals. With us, principles are never tested, and we are proud to always do right by our customers. If you’re a driven professional with a passion for learning and contributing towards the best, then Blackpoint welcomes you. Our team is energetic and collaborative, maintaining a high-performance culture and enabling growth through overcoming challenges in the modern cyberthreat landscape.     What You'll Do <ul style="min-height:1.5em"><li>Creation of detection logic and rules for new and emerging threats </li></ul><ul style="min-height:1.5em"><li>Tune alerts to reduce false positives and ensure detection rules have no gaps in order to maximize the efficiency and accuracy of our best-in-class 24x7 Security Operation Center (SOC) environment </li></ul><ul style="min-height:1.5em"><li>Collaborate with the team to identify common patterns and trends in customer environments </li></ul><ul style="min-height:1.5em"><li>Help design and build visualizations for tracking observed trends in the SOC </li></ul><ul style="min-height:1.5em"><li>Utilize test lab environments to research emerging techniques and make contributions to the internal and external knowledge development of threat operations </li></ul><ul style="min-height:1.5em"><li>Assist the SOC team with responding to and mitigating active threats and attacks for our customers </li></ul><ul style="min-height:1.5em"><li>Review and write detections based on activity caught and mitigated by the SOC. </li></ul>   What You'll Bring <ul style="min-height:1.5em"><li>Two (2+) years of experience in an information security role. Progressive relevant training and/or certification may be substituted for one (1) year of the experience requirement </li></ul><ul style="min-height:1.5em"><li>Experience working in a Security Operations Center (SOC), Threat Hunting, or Digital Forensics and Incident Response (DFIR), preferred </li></ul><ul style="min-height:1.5em"><li>One (1+) years of experience with system tuning and/or engineering </li></ul><ul style="min-height:1.5em"><li>Knowledge of data structures, algorithms, and analysis techniques </li></ul><ul style="min-height:1.5em"><li>Experience in testing adversary tactics, techniques, and procedures (TTPs) along with creating Yara or Sigma rules for detection of these TTPs </li></ul><ul style="min-height:1.5em"><li>Knowledge on assessing threat indicators in a Windows Environment (e.g. Malware/Malicious Anomalies/Abnormal network Activity/Root Level Compromise, Forensic Artifacts, etc.) </li></ul><ul style="min-height:1.5em"><li>Experience with Elasticsearch and Kibana query languages or similar </li></ul><ul style="min-height:1.5em"><li>Knowledge of attacker tools, including legitimate software abused for malicious purposes. </li></ul><ul style="min-height:1.5em"><li>Familiarity with the relationships between parent and child processes, including their arguments and the ability to identify potential suspicious activities. </li></ul><ul style="min-height:1.5em"><li>Ability to work shifts if required (night, weekends, and day) </li></ul><ul style="min-height:1.5em"><li>Ability to troubleshoot and debug issues relating to data indexing and data availability </li></ul><ul style="min-height:1.5em"><li>Excellent communication skills to effectively summarize and present findings and trends </li></ul><ul style="min-height:1.5em"><li>Ability to work independently with strong problem-solving skills </li></ul><ul style="min-height:1.5em"><li>Knowledge of code-signing certificates and how they can be utilized for malicious purposes.  </li></ul>Bonus • Bachelor’s Degree in Computer Science, Engineering, or related technical discipline • Proficiency using Power BI data visualization software • CRTO, eCPTX, or other relevant certifications. • Network/System Administration experience • Deep forensic knowledge of Windows, Mac OS and/or Linux • Red Teaming or Penetration Testing experience. • Malware Analysis (Behavioral and/or Static analysis- IDA, Cuckoo Sandbox, x86/x64 Debugging) Pentesting/Red/Blue Team Blackpoint Cyber welcomes and encourages applications from qualified individuals of all races,  colors, religions, sex, sexual orientation, gender identity or expression, national origin, age, marital  status, or any other legally protected status. We are committed to equality of opportunity in all  aspects of employment.  For eligible employees in the US, Blackpoint offers competitive Health, Vision, Dental, and Life Insurance plans, a robust 401k plan, Discretionary Time Off, and other minor perks.