Lead Information Security Specialist (Sandbox, Email Sandbox)

Lead Information Security Specialist (Sandbox, Email Sandbox) at X5 Tech. Remote work. Salary discussed at interview. Responsibilities include administering BEP systems, email sandbox, YARA rules, and threat intelligence.

Responsibilities: • Administration of BEP (Business Email Protection) systems with dynamic attachment analysis module (F6, Kaspersky KATA/Sandbox, PT Sandbox); • Deep understanding of protocols: SMTP, DKIM, SPF, DMARC, IMAP/POP3, understanding of MTA (Mail Transfer Agent), ICAP (Internet Content Adaptation Protocol): integration of sandbox with mail gateways and MTA; • Extraction of IOCs from reports: network indicators (IP, domains), persistence mechanisms; • Manual checking of suspicious files in sandbox when necessary; • Writing YARA rules to identify malware by signatures.

Requirements: • Deep understanding of protocols: SMTP, MIME, S/MIME, DKIM, SPF, DMARC, IMAP/POP3; • Understanding of sandbox evasion techniques and methods to neutralize them; • Experience writing YARA rules to identify malware by signatures; • Experience optimizing rules to reduce false positives in email flow; • Experience with tools: Wireshark, tcpdump, Python (for automating analysis of logs/PCAP); • Experience with Threat Intelligence (MISP, APT analysis).

Remote work possible. Salary discussed at interview.