Bachelor's degree in cyber security
Certifications: CISSP, CISM, CISA, GCIH, GCFR
Knowledge of and practical experience with the MITRE ATT&CK; framework
Mastery of Python, PowerShell or other scripting languages
Experience working with a SIEM platform mining large datasets
Understanding of web application vulnerabilities including XSS, CSRF, SQL Injection, command injection and serialization attacks
In depth knowledge of operating systems process relationships and file structures (Windows, Mac, Linux).
Functional experience developing new detections for alerting platforms
Expert level knowledge of Cybersecurity attack and defense techniques
Strong understanding of web authentication flows such as SAML and OAUTH
In depth knowledge of cloud environments such as AWS and Azure.
Deep understanding of TCP/IP, DNS, HTTP/S, and packet-level analysis.
Understanding of living off the land techniques used by adversaries, using tools such as PowerShell, WMIC, Task Scheduler, Windows Registry etc.