Principal TDR Analyst

Posted 1hrs ago

Employment Information

Industry
Education
Salary
Experience
Job Type

Report this job

Job expired or something wrong with this job?

Job Description

Principal threat detection analyst leading incident response, threat hunting, and security automation. Protecting Worldwide Flight Services’ global air cargo and airport services operations.

Responsibilities:

  • Lead investigations into complex events and determine incident scope, severity, escalation needs, urgency, and relevant evidence
  • Lead incident root cause analysis, identify attack vectors, and determine affected systems
  • Execute end-to-end incident response, including threat containment, eradication of malicious artifacts, and system restoration
  • Lead threat hunting operations across a global, distributed technology environment
  • Hunt for indicators of compromise and hidden threats in logs, network traffic, and endpoint telemetry
  • Use hypothesis-driven techniques and attacker-behavior knowledge to uncover threats that evaded detection
  • Tune SIEM/EDR detection rules, thresholds, and automation playbooks
  • Automate repetitive response actions
  • Leverage threat intelligence to enrich analysis and response
  • Monitor new vulnerabilities and adversary tactics and adjust detection strategies
  • Coordinate with IT, DevOps, Business, and other cross-functional teams during high-impact incidents
  • Translate complex technical findings into actionable insights for non-technical stakeholders
  • Collaborate with global SOC colleagues across North America, EMEA, and APAC for investigations, hand-offs, coverage, and knowledge sharing
  • Document investigation steps, findings, and actions for incident types
  • Prepare incident reports and contribute to post-incident review meetings with prevention recommendations

Requirements:

  • Bachelor's degree in Cybersecurity, Computer Science, Information Systems, or equivalent threat management and incident response experience
  • Currently hold cybersecurity certifications such as GCIH, GCFA, GCIA, CEH, etc.
  • 10 years of progressive experience in at least three disciplines: threat detection and analysis, incident response and management, threat hunting, cyber threat intelligence, network security, or securing and monitoring operating system and cloud environments
  • Experience functioning as a Level 3 SOC Analyst
  • Advanced understanding of emerging threats, zero-day vulnerabilities, and attack vectors including phishing, malware, ransomware, and lateral movement
  • Hands-on experience with SIEM and EDR platforms
  • Proficiency with command-line environments (win/*nix)
  • Proficiency applying scripting languages for data analysis and investigations
  • Familiarity with cyber threat intelligence feeds and standards
  • Ability to incorporate indicators and threat intelligence into monitoring operations
  • Some domestic travel for project rollouts and North America IT group meetings (approximately 10%)
  • Ability to remain stationary 50% of the time and operate a computer and office equipment
  • Ability to handle/grasp documents or office equipment
  • Ability to sit and/or stand for short or extended periods
  • Ability to work in an office environment and communicate clearly by telephone

Benefits:

  • DailyPay app for accessing pay in advance
  • On-the-spot awards through the Awardco Platform, including gift cards
  • Multiple medical care options for full- and part-time employees
  • Travel discounts
  • Pet insurance
  • Discount shopping
  • Wellness programs
  • 401(k) program
  • Internal mobility and transfer opportunities