Team Lead, Threat Analyst

This is a fully remote position, open to applicants in United Kingdom.

📋 Description

• Supervise the daily queue and provide ongoing oversight for threat analysts.

• Hold regular one-on-one meetings with team members to offer coaching, mentorship, and assist in creating individual development plans with specific performance goals.

• Execute operational tasks aimed at rapid resolution, enhancing efficiency, and minimizing backlog.

• Guide and mentor analysts in delivering accurate and timely technical context to customers, ensuring consistency, clarity, and adherence to MDR communication standards.

• Effectively communicate findings and investigation details to both technical and non-technical stakeholders.

• Collaborate with the broader MDR team to operationalize threat intelligence and generate Indicators of Compromise (IOCs) for future reference.

• Elevate critical technical investigations to Senior Analysts and Senior Team Leads for assessment.

• Operate within established frameworks that contribute to the success factors of the team.

⛳️ Requirements

• 2-3+ years of experience in a cybersecurity environment in an analyst or comparable role.

• Experience in a security operations center or similar setting, with a focus on identifying indications of compromise or attacks and responding to incidents.

• Required experience in endpoint and network security, including IDS, IPS, EDR, ATP, and malware defenses and monitoring.

• Availability to work outside of standard business hours, including weekends and holidays, as our MDR service operates 24x7x365.

• Familiarity with common adversary tactics and techniques, such as obfuscation, persistence, and defense evasion.

• Strong communication and problem-solving skills.

• Innovative mindset, capable of adapting to change and quickly acquiring new skills.

• Comfortable with shift-based work and cross-regional collaboration.

🏝️ Benefits

• Provide triage, data collection, and comprehensive support for customer escalations.

• Lead continuous improvement initiatives to enhance incident response and threat detection methodologies.