Detection Analyst

Job Summary

Working remotely, the full-time Detection Analyst will analyze EDR telemetry and alerts across various detection domains to identify and communicate emerging threats, while driving improvements in workflow through automation for Managed Detection and Response customers.

Key responsibilities

• Analyze EDR telemetry, alerts, and log sources across Endpoint, Identity, Network, and Cloud/SaaS detection domains
• Publish threats with concise communication to convey key indicators and remediation context effectively
• Enhance Detection Operations workflow through orchestration and automation to manage high volumes of telemetry

Required qualifications

• Demonstrated curiosity and experience integrating AI tools to enhance workflows and problem-solving
• Strong experience in Endpoint (EDR) and one or more functional areas including Cloud/SaaS, Identity, Email, or Network detection domains
• Expertise in query languages and understanding syntax across EDR or other security platforms such as SQL or Lucene