Cyber Detection Analyst

clean.io (Now Human); New York (NY); On-site; USD 120,000 - 180,000; Full time

Job summary

HUMAN Security in New York, NY seeks an experienced cyber security/detection analyst to investigate attacks and improve detection health across customer lifecycles. You’ll work with TAMs, SEs, Operations, Research, and Engineering to deliver actionable threat insights and recommendations.

You will analyze large data sets with SQL, create dashboards in Tableau, and leverage ElasticSearch to optimize detection outcomes. A strong communicator and problem-solver is essential.

Qualifications

• 5+ years experience as a cyber security or detection analyst in a SaaS environment.
• Experience with SQL (Snowflake/BigQuery), Tableau and ElasticSearch.
• Excellent communication and collaboration across teams.
• Able to work the Eastern Time Zone for team alignment.

Responsibilities

• Investigate suspicious traffic to identify attacks, false positives, and missed detections.
• Design and test new detection logic for customers.
• Validate product integration and assess whether detection behavior is working as expected.
• Recommend safe detection actions, monitor impact, and adjust as needed.
• Collaborate with R&D, Solution Engineers, and TAM teams on complex issues.
• Translate findings into clear internal updates and customer communications.
• Document investigations and share knowledge with the team.
• Improve recurring workflows through better queries, dashboards, and automation.

Skills

SQL (Snowflake / BigQuery)

Tableau

ElasticSearch

Cybersecurity awareness

Communication skills

Tools

Cursor

AI tools

Job description

The Detection Health and Performance team helps customers maintain effective detection as attacker behavior evolves, by investigating suspicious traffic and identifying missed attacks, reducing false positives, building and evaluating detection logic and improving customers' detection health during onboarding and throughout customer's life cycle.

In this role, you’ll combine data analysis, technical troubleshooting, and customer-focused communication to understand technical and detection gaps, and share helpful threat insights and recommendations. As part of the role you will work in collaboration with Technical Account Managers, Solutions Engineers, Operations, Research and Engineering teams, helping to maintaining strong security outcomes while protecting legitimate users.

What You’ll Do

• Investigate suspicious traffic and identify potential attacks, false positives, and missed detections..
• Design and test new detection logics for customers. .
• Validate product integration and assess whether detection behavior is working as expected..
• Recommend safe detection actions, monitor their impact, and adjust them as traffic and attacker behavior evolve..
• Work with R&D, Solution Engineers, and TAM teams to resolve complex customer and product issues..
• Translate investigation findings into clear internal updates and customer-facing communication and recommendations..
• Document investigations and share knowledge with the team. .
• Improve recurring workflows through better queries, dashboards, and automation..

Who You Are

• +5 years experience as a cyber security or detection analyst / fraud analyst / data or business analyst in a SaaS company.
• Experienced working with large datasets using SQL (Snowflake / BigQuery) and other analysis and visualization tools (Tableau), log analysis tools (ElasticSearch).
• Must be domiciled within the Eastern Time Zone (ET) to support alignment with team and business operating hours.
• Curious, analytical mindset, able to drill down into an investigation and also understand the bigger picture. .
• Motivated to get to the bottom of a problem, understand not only what happened but why it happened, and help resolve it. .
• Interested in cybersecurity, fraud prevention, threat analysis, or how automated attacks operate..
• A clear communicator who can explain technical findings to both technical and nontechnical audiences..
• Collaborative, independent and self-directed, and comfortable learning new tools and concepts..
• Customer facing experience - a big plus..
• Experience working with Cursor and other AI tools to automate workflow is a plus..

About HUMAN Security

HUMAN was founded in a Brooklyn sci-fi bookstore with a hacker mindset and the lofty mission of making the internet safer by putting humans first. Today, our Human Defense Platform safeguards enterprises from sophisticated bots, fraud, and account abuse, verifying the humanity of more than 20 trillion interactions per week for the world’s biggest brands and internet platforms.

HUMAN is an equal opportunity workplace dedicated to protecting the internet's integrity for everyone. We believe in putting people first, embracing diversity of thought from our global teams, and welcoming all individuals to share their unique experiences as we fight cybercrime together. We support our Humans with a comprehensive total rewards package for personal and professional development, including well-being and learning stipends, flexible work options, and dedicated time off. While our HQ is in NYC, we have teams worldwide.

HUMAN is growing fast, and there’s never been a more meaningful time to join us. If you thrive on solving complex problems and want to help shape the future of cybersecurity, join us as we build a safer, more human internet.

If you are an individual with a disability or special need that requires accommodation, please contact us directly.