Team Lead – Threat Analyst

This is a fully remote position, open to applicants in India.

📋 Description

• Supervise operational activities and provide daily oversight for threat analysts.

• Guide analysts in their investigative and response efforts.

• Identify potential root causes and resolutions during security incidents.

• Effectively communicate information to stakeholders across all levels.

• Utilize expertise in network and host-based intrusion analysis, incident response protocols, digital forensics, and malware management.

• Serve as a lead during incident scenarios and offer subject matter expertise in cybersecurity incident response.

• Implement incident handling procedures and respond directly to cybersecurity incidents.

• Stay updated on attacker tools, tactics, and methodologies.

• Generate indicators of compromise (IOCs) for ongoing and future investigations.

• Evaluate cyber threat intelligence and open-source intelligence to operationalize relevant information.

• Manage advanced malware and dynamic cyber threat actors.

• Identify current and emerging threats and engage in related research.

• Oversee the operational efficiency of the Security Operations Center and its personnel.

• Ensure the MDR team fulfills its strategic and operational mission.

⛳️ Requirements

• Over 5 years of experience in a cybersecurity setting.

• Bachelor's degree in information technology, Computer Science, or a related discipline; or equivalent relevant work experience.

• Experience in a security operations center or a comparable environment.

• Proven ability to identify indications of compromise or attacks and respond to incidents.

• Experience in endpoint and network security, including IDS, IPS, EDR, ATP, malware defenses, and monitoring.

• Familiarity with common adversary tactics and techniques, including obfuscation, persistence, and defense evasion.

• Practical knowledge of incident response protocols.

• Experience in administering and supporting Windows OS workstations and servers as well as either Apple or Linux operating systems.

• Fundamental understanding of network traffic analysis, including TCP/IP, routing, switching, and protocols.

• Threat hunting experience is preferred.

• Knowledge of the Mitre ATT&CK framework is preferred.

• Experience in SQL query construction is preferred.

• Familiarity with OSQuery is a plus.

• Leadership experience is preferred.

🏝️ Benefits

• Remote-first work model, with remote work as the primary option for most employees.

• Employee-led diversity and inclusion networks.

• Annual charity and fundraising initiatives.

• Volunteer days for employees.

• Global employee sustainability initiatives.

• Global fitness and trivia competitions.

• Global wellbeing days.

• Monthly wellbeing webinars and training.

• Adjustments in recruitment and selection processes for accessibility when needed.