enterprise systems · log analysis
Role Summary
As an MDR Threat Analyst, you will work with enterprise systems, log analysis systems, and endpoint collection systems to facilitate the investigation, identification and neutralization of cyber threats. You will work alongside and contribute to a team of analysts with the objective of providing best in class monitoring, detection and response services.
What you will do
- Handle escalations from level I Threat Analysts - guide / advise on investigation handling
- On-board and train new Threat Analysts
- Participate in Security Operations process improvement and creation
- Provide detection and response to security events and cyber-threats
- Conduct security log management and monitoring
- Maintain information security metrics
- Provide assistance to core security and threat response teams
- Create MDR service-related reports
- Create cases for clients
- Track and follow up with client through threat neutralization
- Interact with clients via various mediums
- Actively research recent Indicators or Compromise/Attack, exploits and vulnerabilities
- Obtain metrics for reporting on threat trends, intelligence analysis and situational awareness
What you will bring
- 2-4 years of experience working in a SOC environment or computer security team in an IT environment
- Endpoint and network security experience required; IDS, IPS, EDR, ATP, Malware defenses and monitoring experience
- Threat hunting experience preferred
- Knowledge of common adversary tactics and techniques, e.g., obfuscation, persistence, defense evasion, etc.