Cybersecurity Senior Analyst | Threat Detection & Response (Remote)

The Cybersecurity Senior Analyst is a Senior intermediate-level position within the SOC TDR (Threat Detection & Response) team. This analyst will report to the TDR Manager and will perform tasks including advanced security monitoring and detection through research, classification, and analysis of security events. The TDR Senior Analyst will leverage security solutions to investigate alerts and anomalous behavior. Senior Analyst’s perform advanced data gathering, analysis, synthesis and develop solutions to support THD Cybersecurity practices. Senior Analyst possess excellent communication skills, work well with a team, interact with multiple levels and functions across the organization. Senior Analyst mentors and guides Jr Analysts. Lead multiple projects, possess excellent communication skills, work well with a team, interact with multiple levels and functions across the organization.

• Be the front-line responder by identifying, triaging, and remediating security detections and anomalies
• Provide incident response support, leading Threat Detection and Response analysts during technical investigations, effectively communicating results, analytical analysis, and mitigations to different operational teams and management
• Analyze and interpret complex and high-volume data from various sources to advance investigations, quantify trends, or support analytical findings
• Evaluate the type and severity of security events leveraging their in-depth knowledge of exploits and vulnerabilities
• Leverage technology (commercial and open source) to enrich, triage, and characterize internal insights on malware and Indicators of Compromise (IOCs)
• Provide recommendations for improvements and optimizations for security tools based on their experience and analytical insight.
• Collaborate with technical and business teams to drive TDR and SOC initiatives
• Lead the development of new investigative techniques and automation workflows
• Create and review playbooks for efficiency and proactively improving playbooks where necessary
• Stay informed about information security trends and technologies in the technology industry and identify best practices and/or methodologies
• Work with and train junior analysts on THD technologies, alert lifecycle, and investigative best practices
• Participate in threat detection and incident response activities including threat hunting, detection creation, endpoint analysis, end-user interviews, and timeline construction.
• Help improvement measures to improve our alerting and detection practices
• Refine and develop dashboards, queries, and reports to continuously improve security situational awareness
• Participate in the evaluation, deployment, integration, and configuration of new networking and security solutions
• Lead in the investigation of security events and incidents in collaboration with the SOC team
• Search and analyze security logs for malicious and abnormal network behaviors
• Ability to analyze data and communicate malicious behavior discoveries to non-technical consumers, * 50% Analysis - Synthesize data to develop a solution, communicate the solutions, present the solution to teams/stakeholders
• 20% Collaborate - Partner cross-functionally to identify trends and resolve issues
• 20% Drive Execution - Implement solutions to meet customer expectations; Ensure initiative/project goals are met in a timely manner
• 10% Support and Enable - Mentor junior level Analyst

Direct Manager/Direct Reports:

• This Position typically reports to Manager or Sr. Manager
• This Position has 0 Direct Reports

Travel Requirements:

• Typically requires overnight travel less than 10% of the time.

Physical Requirements:

• Most of the time is spent sitting in a comfortable position and there is frequent opportunity to move about. On rare occasions there may be a need to move or lift light articles.

• Security+, Network+
• CySA+, CEH, OSCP
• GIAC Certifications such as GSEC, GMON, GCIH
• Cloud Security Certs from Public Providers such as GCP, Azure, and AWS, * Must be eighteen years of age or older.
• Must be legally permitted to work in the United States.

Minimum Education:

• The knowledge, skills and abilities typically acquired through the completion of a bachelor’s degree program or equivalent degree in a field of study related to the job.

Minimum Years of Work Experience:

• 5, * Action Oriented
• Collaborates
• Communicates Effectively
• Customer Focus
• Drives Results

• Located in a comfortable indoor area. Any unpleasant conditions would be infrequent and not objectionable.