Principal TDR Analyst

This is a fully remote position, open to applicants in Texas.

📋 Description

• Oversee investigations into intricate events to assess incident scope, severity, escalation requirements, urgency, and pertinent evidence.

• Direct incident root cause analysis, pinpoint attack vectors, and identify affected systems.

• Implement comprehensive incident response, including threat containment, removal of malicious artifacts, and restoration of systems.

• Spearhead threat hunting initiatives within a global, distributed technology landscape.

• Search for indicators of compromise and concealed threats within logs, network traffic, and endpoint telemetry.

• Employ hypothesis-driven methodologies and knowledge of attacker behavior to reveal threats that have bypassed detection.

• Adjust SIEM/EDR detection rules, thresholds, and automation playbooks for optimal performance.

• Automate repetitive response tasks to enhance efficiency.

• Utilize threat intelligence to enrich analysis and response efforts.

• Monitor emerging vulnerabilities and adversarial tactics, modifying detection strategies accordingly.

• Collaborate with IT, DevOps, Business, and other cross-functional teams during significant incidents.

• Convert complex technical findings into actionable insights for non-technical stakeholders.

• Work alongside global SOC colleagues in North America, EMEA, and APAC for investigations, hand-offs, coverage, and knowledge sharing.

• Record investigation steps, findings, and actions for various incident types.

• Create incident reports and participate in post-incident review meetings, offering prevention recommendations.

⛳️ Requirements

• A Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, or equivalent experience in threat management and incident response.

• Active cybersecurity certifications such as GCIH, GCFA, GCIA, CEH, etc.

• A decade of progressive experience across at least three disciplines: threat detection and analysis, incident response and management, threat hunting, cyber threat intelligence, network security, or securing and monitoring operating systems and cloud environments.

• Experience as a Level 3 SOC Analyst.

• Advanced understanding of new threats, zero-day vulnerabilities, and attack vectors, including phishing, malware, ransomware, and lateral movement.

• Practical experience with SIEM and EDR platforms.

• Proficient in command-line environments (Windows/*nix).

• Skilled in applying scripting languages for data analysis and investigations.

• Familiarity with cyber threat intelligence feeds and standards.

• Capable of incorporating indicators and threat intelligence into monitoring operations.

• Willingness to travel domestically for project rollouts and North America IT group meetings (approximately 10%).

• Ability to remain stationary 50% of the time and operate a computer and office equipment.

• Capability to handle/grasp documents or office equipment.

• Ability to sit and/or stand for short or extended periods.

• Competence to work in an office environment and communicate effectively by telephone.

🏝️ Benefits

• DailyPay app for early access to earned pay.

• Immediate recognition awards through the Awardco Platform, including gift cards.

• Various medical care options available for both full- and part-time employees.

• Travel discounts offered.

• Pet insurance options.

• Discount shopping opportunities.

• Wellness programs accessible to employees.

• 401(k) retirement plan.

• Opportunities for internal mobility and transfers.