Cyber Detection Analyst — Data-Driven Threat Investigator

Human Security, Inc.; New York, Northern (NY, KY); Hybrid; USD 90,000 - 120,000; Full time

Benefits offered by this job

Well-being stipend

Learning stipend

Flexible work options

Dedicated time off

Job summary

HUMAN Security is seeking a Detection Health and Performance Analyst to investigate suspicious traffic, identify attacks and false positives, and design detection logic for customers. You will validate product integration and adapt detection actions as attacker behavior evolves, working alongside R&D, engineers, and TAM teams to deliver clear, customer-facing insights and actionable recommendations.

The role emphasizes data analysis, technical troubleshooting, and proactive communication to

Qualifications

• 3+ years as cyber security or detection analyst in a SaaS company.
• Experience with large datasets using SQL and visualization tools.
• Curious and analytical mindset to drill into investigations and understand root causes.

Responsibilities

• Investigate suspicious traffic and identify potential attacks, false positives, and missed detections.
• Design and test new detection logics for customers.
• Validate product integration and assess whether detection behavior is working as expected.
• Recommend safe detection actions and monitor their impact.
• Collaborate with R&D, Solution Engineers, TAM teams to resolve complex issues.
• Translate investigation findings into clear internal updates and customer-facing communications.
• Document investigations and share knowledge with the team.
• Improve recurring workflows through better queries, dashboards, and automation.

Skills

3+ years experience

SQL

Tableau

ElasticSearch

Cybersecurity knowledge

Clear communicator

Collaboration

Self-directed

Customer facing

AI tools (Cursor)

Tools

Snowflake

BigQuery

ElasticSearch

Cursor

Job description

HUMAN Security is seeking a Detection Health and Performance Analyst to investigate suspicious traffic, identify attacks and false positives, and design detection logic for customers. You will validate product integration and adapt detection actions as attacker behavior evolves, working alongside R&D, engineers, and TAM teams to deliver clear, customer-facing insights and actionable recommendations.

The role emphasizes data analysis, technical troubleshooting, and proactive communication to