Detection Analyst

Job Summary

Utilizing advanced detection platforms, the full-time remote Detection Analyst will analyze EDR telemetry and alerts across various domains, publish threat findings for Managed Detection and Response customers, and enhance workflow through automation and orchestration.

Key responsibilities

• Analyze EDR telemetry, alerts, and log sources across Endpoint, Identity, Network, and Cloud/SaaS detection domains
• Publish threats using concise communication to convey key indicators and remediation context effectively
• Improve Detection Operations workflow through orchestration and automation to manage high volumes of telemetry

Required qualifications

• Demonstrated curiosity and active exploration of AI tools, with experience integrating new technologies into workflows
• Strong experience in Endpoint (EDR) and one or more functional areas including Cloud/SaaS, Identity, Email, or Network detection
• Expertise in using query languages and understanding syntax across EDR or other security platforms such as SQL or Lucene