Senior Security Analyst, MDR
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
Senior Security Analyst leading cloud, identity, endpoint, and SaaS investigations for Artemis's AI-driven defense platform. Shaping Apollo's managed detection and response service.
Responsibilities:
- Lead investigations across cloud, identity, endpoint, and SaaS
- Own cases from pickup to closure, determining impact, blast radius, verdict, and severity
- Reconstruct attacker activity including initial access, lateral movement, persistence, and exfiltration
- Combine AI-assisted investigation with hands-on log analysis
- Recommend and execute containment within customer-authorized limits
- Communicate recommended actions, impact, and next steps to customers
- Work according to risk and severity response targets
- Provide customer-facing summaries, reasoning, and final analysis
- Conduct hypothesis-driven and AI-assisted threat hunts
- Turn threat-hunting findings into new cases and detections
- Help design Apollo's investigative standards, response workflows, reporting, and analyst console
- Feed verdicts, reasoning, and recognized patterns into detection engineering and product improvements
Requirements:
- 4+ years of hands-on security operations experience in a SOC, MSSP, or MDR environment
- Senior or Tier 3 experience where investigations ended with your decision
- Investigation experience across Okta, Entra ID, AWS, Azure, GCP, EDR, Microsoft 365, and Google Workspace
- Fluency in MITRE ATT&CK and attacker tactics, techniques, and procedures
- Strong evidence-based investigation skills
- Hands-on experience with AI-assisted investigation or automation
- Customer-facing experience explaining live security situations and recommended actions
- Excellent written communication
- Comfortable working a defined shift as analyst coverage expands to 24x7
- Bonus: multi-tenant MDR or MSSP experience
- Bonus: experience writing or tuning Sigma, YARA-L, SPL, KQL, or similar detection rules
- Bonus: incident command experience, including customer executive briefings
- Bonus: dedicated threat hunting or DFIR background
- Bonus: daily hands-on use of AI or agentic coding tools
Benefits:
- Join early enough to shape the service, standards, and customer experience
- Meaningful real-world impact protecting companies and their employees
- Broad experience across cloud, identity, endpoint, SaaS, and attacker behavior
- Exposure to AI-native security operations and emerging technology
- Innovative culture with open communication, mentorship, and learning
- Autonomy to drive investigations, shape the platform, and own outcomes
Similar Jobs
Senior Information Security Analyst
Analista sênior de segurança protegendo soluções digitais e serviços de TI da Hitss. Atuando com Microsoft Defender, firewalls, antivírus, proxy, SFTP e resposta a chamados.
Security Analyst
Security Analyst protecting systems, data, and client information at Power Digital, an AI-native growth firm. Monitoring threats, managing vulnerabilities, and maintaining SOC 2 compliance.
Associate Security Analyst II
Security Analyst hunting threats across client environments for DirectDefense, a managed cybersecurity services provider. Monitoring SIEM/EDR systems and delivering actionable incident-response guidance.
Security Analyst I
Security Analyst I monitoring client environments, investigating threats, and supporting 24/7 incident response. Producing vulnerability reports and communicating findings to technical and executive audiences.
IT Security Analyst I – Evening Shift
IT Security Analyst monitoring security events and responding to incidents for VC3’s municipal and organizational IT clients. Investigating alerts, analyzing logs, and supporting threat hunting on an evening shift.
IT Security Analyst I
IT Security Analyst monitoring security events and responding to incidents for VC3, an IT services provider serving municipalities and organizations across the United States and Canada.
Cyber Security Analyst III – Digital Forensics, Incident Response
Cybersecurity analyst conducting digital forensics and incident response for the U.S. Department of Energy Hanford Site. Monitoring enterprise threats, investigating incidents, and supporting remediation.
Cybersecurity Analyst
Analista de Cyber Security protegendo soluções digitais da Click Cannabis para acesso responsável à cannabis medicinal. Condução de pentests, DevSecOps, segurança AWS e resposta a incidentes.
Principal Research Analyst – Information Security
Principal Research Analyst leading ISACA’s information security research, frameworks, and practitioner content. Representing the global technology association through thought leadership, events, and member guidance.
IT Security Analyst
IT Security Analyst supporting Signode’s SOC through threat detection, incident response, and malware analysis. Monitoring alerts, hunting threats, and improving security operations processes.
Associate Security Analyst
Security Analyst monitoring client environments, investigating threats, and tuning SIEM detections. DirectDefense delivers managed cybersecurity defense, vulnerability assessments, and compliance services.
Security Analyst
T1 Security Analyst investigating security incidents and logs for Playtech, a global gaming technology company. Supporting incident response and security infrastructure across 24/7 operations.
Analista de Seguridad de la Información – Semi Senior
Analista de Seguridad de la Información apoyando la operación de ciberseguridad de Stefanini. Monitoreando alertas, afinando reglas y analizando riesgos, vulnerabilidades y controles.
Information Security Compliance Analyst
Information security compliance analyst supporting ImageTrend’s healthcare and emergency-response software platforms. Coordinating audits, risk management, cloud compliance, and security controls across AWS and Azure.
Information Security Analyst
Information Security Analyst defending Satellite Office’s global brand portfolio from cyber threats. Hunting threats, responding to major incidents, and strengthening protection across 2,000+ IT assets.
Security Analyst – Third Shift
Security Analyst investigating alerts and incidents for nuHarbor’s managed cybersecurity services. Executing response actions and escalating high-severity findings for client protection.
Security Analyst
Security Analyst supporting Sprezzatura’s secure VA.gov Platform and federal ATO lifecycle. Translating cybersecurity requirements into engineering guidance, documentation, assessments, and compliance actions.
Security Analyst II
Security Analyst II defending Netrix Global client environments and infrastructure through 24/7 SOC monitoring. Investigating incidents, improving SIEM detections, hunting threats, and automating security operations.
Information Security Analyst, Mid-Level – DevSecOps
DevSecOps analyst securing AWS environments and CI/CD pipelines for SGA’s corporate systems. Automating vulnerability remediation, secrets management, and Secure by Design practices.
Senior Security Analyst
Senior Security Analyst strengthening GRC, compliance, and cloud security. Protecting mortgage-finance systems and data at AI-native operating system company Valon.