Threat Analyst 3

Overview

As an MDR Threat Analyst, you will work with enterprise systems, log analysis systems, and endpoint collection systems to investigate, identify and neutralize cyber threats, contributing to a team providing best-in-class monitoring, detection and response services.

What you'll do

• Handle escalations from level I Threat Analysts and guide or advise on investigation handling
• On-board and train new Threat Analysts
• Participate in Security Operations process improvement and creation
• Provide detection and response to security events and cyber-threats
• Conduct security log management and monitoring
• Maintain information security metrics
• Provide assistance to core security and threat response teams
• Create MDR service-related reports
• Create cases for clients and track and follow up with clients through threat neutralization
• Interact with clients via various mediums
• Actively research recent Indicators of Compromise/Attack, exploits and vulnerabilities
• Obtain metrics for reporting on threat trends, intelligence analysis and situational awareness

What you'll need

• Bachelor's in Information Technology, Computer Science or a related field; or relevant commensurate work experience
• 5+ years of experience working in a SOC environment or computer security team in an IT environment
• Endpoint and network security experience required, including IDS, IPS, EDR, ATP, malware defenses and monitoring experience
• Knowledge of common adversary tactics and techniques, e.g., obfuscation, persistence, defense evasion
• Working knowledge of incident response procedures
• Experience administering and supporting Windows OS (workstations and servers) and one of the following: Apple or Linux-based operating systems
• Fundamental understanding of network traffic analysis including TCP/IP, routing, switching, protocols
• Strong understanding of Windows event log analysis
• Experience with enterprise information security data management
• Programming and scripting skills
• Excellent troubleshooting and analytical thinking skills
• Strong documentation and communication skills
• Excellent customer service skills
• Must be able to thrive within a team environment as well as on an individual basis

Nice to have

• Knowledge of the MITRE ATT&CK framework
• Experience with SQL query construction
• Experience with OSQuery
• SIEM experience
• Proficient knowledge of PowerShell
• Advanced cyber security certifications
• Threat hunting experience
• Passion for all things information technology and information security; natural curiosity and ability to learn new skills quickly; ability to think outside the box; innovative mindset

Details

• Remote role; candidates must reside in and be authorized to work in India
• Willingness to work outside standard business hours, including weekends and holidays, as the Managed Detection and Response service runs 24x7x365