Senior Cyber Analyst

This is a fully remote position, open to applicants in Pennsylvania.

📋 Description

• Oversee the cybersecurity incident response process, including triage, investigation, scoping, containment, eradication, recovery, stakeholder communication, and post-incident reviews.

• Ensure incident-response preparedness through the development of plans, playbooks, and conducting exercises.

• Take ownership of the SIEM content program, which encompasses strategy, roadmap, engineering standards, lifecycle governance, and metrics.

• Design, construct, validate, fine-tune, and sustain detections aligned with attacker methodologies.

• Leverage threat intelligence, lessons learned from incidents, risk priorities, and telemetry to enhance detections.

• Provide technical guidance and quality control for contracted MSSP content-development resources.

• Facilitate knowledge transfer among internal team members.

• Conduct analysis on endpoint, identity, cloud, network, and event-log telemetry.

• Assist in threat hunting, threat intelligence, and security monitoring efforts.

• Collaborate with platform engineering to enhance data quality and coverage.

• Work together with technology, business, legal, privacy, and risk teams.

• Participate in the on-call rotation for high-severity incidents occurring outside of regular business hours.

⛳️ Requirements

• A Bachelor’s degree in cybersecurity, information security, computer science, information technology, or a related field, or a comparable combination of education and relevant professional experience.

• A minimum of 3 years of relevant experience in cybersecurity.

• Significant hands-on experience in leading cybersecurity incident response and managing the incident lifecycle.

• Proficient in SIEM detection-content engineering.

• Experience in threat hunting and analyzing security telemetry.

• Competence in analyzing data from endpoint, identity, cloud, network, and event logs.

• Experience in digital forensics or conducting advanced technical investigations.

• Background in technical program leadership, standards development, or lifecycle governance.

• Strong preference for individuals with experience in establishing technical direction, influencing cross-functional partners, communicating effectively during high-pressure incidents, and mentoring employees or contracted technical resources.

• Familiarity with CrowdStrike Query Language (CQL), CrowdStrike NextGen SIEM (LogScale), or similar SIEM platforms is preferred.

• Prior experience in designing, testing, tuning, and maintaining SIEM detection content is preferred.

• Knowledge of attacker tactics, techniques, and procedures and their relevance to detection engineering is preferred.

• Experience in digital forensics, threat hunting, threat intelligence, or exposure management is preferred.

• Prior experience leading or providing technical oversight to MSSP or contracted security resources is preferred.

• Understanding of detection coverage, alert quality, content health, and response effectiveness metrics is preferred.

• Relevant SANS or industry certifications are preferred.

🏝️ Benefits

• Medical, dental, and vision coverage starting on Day 1.

• Wellness programs that support both physical and mental health.

• Opportunities for annual incentives.

• 401(k) plan with company matching.

• Paid time off.

• Company holidays.

• Flexible work arrangements where applicable.

• Career development programs.

• Opportunities for learning and professional growth.

• Internal mobility options.

• A comprehensive benefits package that supports physical, mental, and financial well-being.