Project mode: Fully onsite

Resource allocation: 1 resource

Scope of work / requirements:

• Space42 will interview candidates as part of the resource selection process.

• The selected supplier must provide resources that meet InfoSec requirements.

• Candidates should have 4–7 years of experience in a similar role.

• The cost proposal must include all expenses, including travel, insurance, pensions,

visas, and related costs.

• Space42 will conduct background checks for selected candidates.

• Suppliers must provide replacement resources when selected candidates are on

annual leave, sick leave, or otherwise unavailable.

• Space42 reserves the right to request a replacement if a candidate does not meet the

required performance expectations.

Job description:

Security Monitoring & Incident Response

• Monitor SIEM, EDR, NDR, and other security tools for suspicious activity and security

events.

• Perform triage, investigation, containment, eradication, and recovery of security

incidents.

• Correlate logs from network, endpoint, cloud, and application sources to detect

malicious behaviour.

• Develop and manage SIEM use cases and alert tuning to reduce false positives.

• Support digital forensics and post-incident analysis.

• Maintain incident documentation and reporting aligned with regulatory requirements.

• Coordinate with internal teams and external stakeholders during security incidents.

Intrusion & Threat Analysis

• Analyze network telemetry, endpoint logs, and threat feeds to identify intrusion

attempts.

• Correlate Indicators of Compromise (IOCs) and Tactics, Techniques, and Procedures

(TTPs) with known threat actor campaigns.

• Provide threat context, attribution insights, and intelligence support to investigations.

• Develop detection logic using Sigma, Snort, YARA, and custom scripts.

• Conduct proactive threat hunting based on emerging intelligence.

Malware Analysis & Reverse Engineering

• Perform static and dynamic malware analysis using tools such as Ghidra, IDA Pro,

x64dbg, and Cuckoo Sandbox.

• Reverse engineer obfuscated binaries and scripts to identify payloads, persistence

techniques, and command-and-control (C2) infrastructure.

• Develop YARA rules and behavioural signatures for malware detection.

• Maintain a malware repository and contribute to detection engineering improvements