Proactively monitor, investigate, and respond to advanced threats
Partner with engineering and infrastructure teams to reduce risk exposure through effective threat detection improvements
Investigate and analyze security alerts from SIEM, EDR, Dark Web Monitoring & Cloud Security Tools
Provide comprehensive support for incident response activities, including containment, eradication, and recovery
Perform thorough root cause analysis and document incident findings
Develop and refine incident response playbooks
Work effectively and collaboratively with our Managed Security Service Provider (MSSP)
Conduct hypothesis-driven threat hunting across endpoint, network, and cloud environments
Leverage EDR tooling to detect lateral movement and suspicious activity
Stay continuously up-to-date on emerging threat intelligence and attacker behaviors
Manage incidents from escalation by Tier 1 until final closure, ensuring adherence to established frameworks
Act as the primary technical point of contact during active incidents

4+ years of hands-on experience in a Security Analyst, SOC, or Incident Response role
Strong experience with SIEM platforms (e.g., Splunk, Sentinel, Crowdstrike, Rapid7)
Hands-on experience with EDR tools (e.g., CrowdStrike, Defender, SentinelOne)
Strong understanding of networking fundamentals, security principles, and common attack vectors
Excellent analytical, communication, and collaboration skills, with the ability to translate technical findings into business-impact language.

Security Analyst – Detect & Respond

Key skills