Security Analyst – Tier 3

This is a fully remote position, open to applicants in District of Columbia, +1 more state.

📋 Description

• Assess and verify the investigations conducted by the AI Agents for precision and thoroughness, while evaluating risk.

• Provide leadership and guidance to junior analysts, acting as the technical authority and primary escalation contact for investigations.

• Integrate data from diverse sources such as cloud, endpoint, identity, and network to gain a comprehensive understanding of malicious activities.

• Examine the malicious activities that the AI Agents have addressed, comprehending the intricacies of the thwarted attacks and the risks averted for clients.

• Employ our advanced AI Agents to conduct threat hunting within customer environments, identifying and mitigating emerging threats, and contributing to detections that will enhance our product.

• Support customers with continuous threat monitoring, triaging, and prioritization of security alerts as necessary, particularly during incidents to address threats and secure their environments.

• Actively identify potential threats and anomalies in customer environments by analyzing logs and malicious findings.

• Leverage your exceptional communication abilities to engage with customers of varying technical expertise, from SOC analysts to CISOs.

• Design processes as we expand this elite organization, ensuring sustainable operational scalability while maintaining consistent quality.

• Collaborate with Sales, Engineering, and Product teams, providing insights on customer experiences and assisting in optimizing and refining the AI platform.

• Keep abreast of the latest trends in cybersecurity, vulnerabilities, and new attack strategies, particularly in the realm of AI-driven attacks.

⛳️ Requirements

• Over 5 years of experience in cybersecurity operations.

• Practical experience in investigating alerts across multiple platforms (endpoint, network, identity, email, cloud, etc.).

• Strong knowledge of security monitoring tools (XDR, SIEM, IDS/IPS, IDP, etc.).

• Familiarity with log and telemetry concepts.

• In-depth understanding of common attack methodologies and frameworks (MITRE ATT&CK) as well as incident triage processes.

• Excellent analytical and problem-solving capabilities, with the ability to validate AI-driven analyses and make independent security decisions.

• Experience in data querying using SIEM technologies (SPL, KQL, FQL, SQL, etc.) and a good grasp of log and telemetry concepts.

• Strong knowledge of Malware Analysis techniques.

• Outstanding interpersonal abilities with a service-oriented mindset.

• Demonstrated history of effective teamwork, including mentoring skills and the capacity to explain complex concepts.

• Previous experience in a Managed Services environment.

• Experience in Incident Handling.

• Relevant certifications: Security+, GSEC, GCIH.

🏝️ Benefits

• Flexibility in work arrangements.

• Opportunities for professional development.