> Markdown version of [/jobs/ext/240471-cyber-threat-detection-response-analyst](https://www.wearedevelopers.com/jobs/ext/240471-cyber-threat-detection-response-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Cyber Threat Detection & Response Analyst

- **Company:** Ultraviolet Cyber
- **Location:** United States (Remote available)
- **Experience:** Experienced
- **Salary:** $75,000.0 - $95,000.0
- **Contract:** Permanent contract
- **Skills:** Artificial Intelligence, Amazon Web Services, Microsoft Azure, Cloud Computing Security, Intrusion Detection and Prevention, Python (Programming Language), Log Analysis, Windows PowerShell, Security Information and Event Management, Scripting, Google Cloud, Mitre Att&ck, Malware, Cyber Threat Analysis, Information Technology, Cybercrime, Splunk, SentinelOne Expertise
- **Published:** May 19, 2026
- **Apply:** https://www.indeed.com/viewjob?jk=f4978e2ab1c8cbe4

## About the Role

* US Citizenship is Required
 * 4+ years of experience in cybersecurity, with at least 2 years focused on threat hunting, detection engineering, or incident response.
 * Demonstrated ability building hypotheses from threat models, not just IOC-driven searches.
 * Strong understanding of threat actor tradecraft, including malware, lateral movement, persistence, and exfiltration techniques.
 * Proficiency with SIEMs, EDR/XDR platforms, and log analysis tools (SentinelOne AI SIEM, CrowdStrike, MS Defender and Sentinel, Splunk, Elastic).
 * Experience with scripting languages (Python, PowerShell, etc.) to automate analysis and detection.
 * Familiarity with MITRE ATT&CK, threat intelligence platforms, and adversary emulation.
 * Strong analytical, investigative, and problem-solving skills., * Experience with cloud security (AWS, Microsoft Azure, GCP).
 * Knowledge of threat hunting in OT/ICS environments.
 * B.A or B.S in computer science or related field.
 * GIAC Threat Hunting (GCTH).
 * GIAC Certified Enterprise Defender (GCED).
 * GIAC Certified Intrusion Analyst (GCIA).

## Description

* Proactively hunt for hidden threats across endpoints, networks, cloud, and applications.
 * Proactively create detection rules to alert SOC analysts of intrusions against customer networks.
 * Assist with tuning and enhancing existing detection rules to better defend against evolving threats.
 * Develop and execute hypotheses-driven threat hunting campaigns using security data and intelligence.
 * Analyze large volumes of log, endpoint, and network data to uncover anomalous or malicious activity.
 * Research and track adversary TTPs and leverage frameworks such as MITRE ATT&CK.
 * Collaborate with Detection Engineering to refine detection rules, signatures, and playbooks to improve threat detection.
 * Collaborate with Incident Response and SOC teams to investigate and contain security incidents.
 * Provide technical mentorship to junior threat hunters and SOC analysts. Partner with Threat Intelligence to operationalize indicators and adversary insights.
 * Contribute to continuous improvement of detection engineering and hunting methodologies.
 * Regularly engage with internal account teams and customers to help strengthen their security posture, identify weaknesses, report on findings, and report on detection strategies.
 * Provide technical insight to internal account teams and customers as needed.


## Related Videos

- [Cyber Sleuth: Finding Hidden Connections in Cyber Data](https://www.wearedevelopers.com/videos/893-cyber-sleuth-finding-hidden-connections-in-cyber-data)
- [Enhancing Workload Security in Kubernetes](https://www.wearedevelopers.com/videos/356-enhancing-workload-security-in-kubernetes)
- [Our journey with Spring Boot in a microservice architecture](https://www.wearedevelopers.com/videos/511-our-journey-with-spring-boot-in-a-microservice-architecture)
- [JavaScript? No. Java Scripts! - Scripting with Java](https://www.wearedevelopers.com/videos/2094-javascript-no-java-scripts-scripting-with-java)
- [Intermediate Bitcoin Script](https://www.wearedevelopers.com/videos/25-intermediate-bitcoin-script)
- [Checkmate: 5 Real Incidents That Can End a Software Company](https://www.wearedevelopers.com/videos/100126-checkmate-5-real-incidents-that-can-end-a-software-company)

## Related Articles

- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)
- [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated)
- [The Most Popular IT Jobs on the Market](https://www.wearedevelopers.com/magazine/376-the-most-popular-it-jobs-on-the-market)
- [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers)