Threat Analyst

📋 Description

• Investigate escalated security alerts and incidents across endpoint, network, cloud, and identity
• Analyze incidents to establish root cause, attack scope, lateral movement, persistence mechanisms
• Support ransomware investigations by examining attacker activity, malware behavior, persistence
• Analyze and deobfuscate suspicious scripts, malware samples, and other indicators to identify
• Conduct proactive threat hunts based on defined hypotheses, emerging intelligence, suspicious
• Investigate suspicious authentication events, privilege escalation, privileged account misuse, and

🎯 Requirements

• 3–5 years of professional experience in a Security Operations Center, Managed Detection and
• Hands-on experience investigating endpoint and network security alerts using EDR and SIEM platforms
• Working knowledge of ransomware attack patterns, common intrusion techniques, adversary behaviors
• Experience investigating both Windows and Linux systems, including Windows Event Logs, Linux logs
• Practical experience analyzing obfuscated scripts and malware behavior, with the ability to perform
• Basic understanding of cloud and identity security investigations, including suspicious

🎁 Benefits

• Remote-first working model, with remote work serving as the primary arrangement for most roles
• Opportunity to work on real-world cybersecurity investigations across endpoint, network, cloud, and
• Exposure to advanced threat detection, incident response, ransomware investigations, malware
• Close collaboration with experienced security professionals and opportunities to strengthen
• Opportunities to develop practical knowledge across EDR, SIEM, cloud security, identity security
• Professional development opportunities and continued learning within a cybersecurity-focused