Threat Analyst 2

📋 Description

• Investigate escalated security alerts and incidents across endpoint, network, cloud, and identity
• Analyze incidents to establish root cause, attack scope, lateral movement, affected systems, and
• Support ransomware investigations by examining attacker activity, credential abuse, persistence
• Analyze and deobfuscate suspicious scripts, malware samples, and other indicators to identify
• Conduct proactive threat hunting based on defined hypotheses, threat intelligence, and emerging
• Investigate suspicious authentication activity, privilege escalation, and identity or

🎯 Requirements

• 3–5 years of experience in a SOC, MDR, incident response, or related cybersecurity operations
• Hands-on experience investigating endpoint and network security alerts using EDR and SIEM
• Working knowledge of ransomware attack patterns, common intrusion techniques, and adversary
• Practical experience investigating both Windows and Linux systems.
• Experience analyzing obfuscated scripts and malware behavior, including deobfuscation techniques.
• Familiarity with adversary tactics and techniques and practical exposure to the MITRE ATT&CK

🎁 Benefits

• Remote-first working model, with remote work as the primary arrangement for most roles.
• Opportunity to work on real-world cybersecurity incidents and develop expertise across multiple
• Exposure to endpoint, network, cloud, identity, SIEM, EDR, threat intelligence, and incident
• Collaboration with experienced security professionals on complex and high-severity investigations.
• Employee-led diversity and inclusion networks supporting community, education, and advocacy.
• Annual charity, fundraising, and employee volunteer initiatives.