Cyber Detection Analyst - Data-Driven Security Investigator

HUMAN; New York (NY); On-site; USD 110,000 - 150,000; Full time

Job summary

HUMAN Security is seeking a disciplined detection analyst to investigate suspicious traffic, identify attacks and false positives, and design robust detection logic for customers. You will collaborate with cross‑functional teams to validate product integration and refine detection strategies as attacker behavior evolves.

The role emphasizes clear communication of complex findings to both technical and nontechnical audiences, with a focus on improving detection health throughout the customer

Qualifications

• 3+ years experience as a cyber security or detection analyst / fraud analyst / data or business analyst in a SaaS company.
• Experience working with large datasets using SQL (Snowflake / BigQuery) and analysis/visualization tools (Tableau) and log analysis tools (ElasticSearch).
• Clear communicator who can explain technical findings to technical and nontechnical audiences.

Responsibilities

• Investigate suspicious traffic and identify potential attacks, false positives, and missed detections.
• Design and test new detection logics for customers.
• Validate product integration and assess whether detection behavior is working as expected.
• Recommend safe detection actions, monitor their impact, and adjust as attacker behavior evolves.
• Collaborate with R&D, Solution Engineers, and TAM teams to resolve complex customer issues.
• Translate investigation findings into clear internal updates and customer-facing recommendations.
• Document investigations and share knowledge with the team.
• Improve recurring workflows through better queries, dashboards, and automation.

Skills

SQL

Tableau

ElasticSearch

Analytical mindset

Communication

Collaboration

Tools

Snowflake

BigQuery

Job description

HUMAN Security is seeking a disciplined detection analyst to investigate suspicious traffic, identify attacks and false positives, and design robust detection logic for customers. You will collaborate with cross‑functional teams to validate product integration and refine detection strategies as attacker behavior evolves.

The role emphasizes clear communication of complex findings to both technical and nontechnical audiences, with a focus on improving detection health throughout the customer