Cyber Threat Analyst - SIEM & Threat Hunting

Cellebrite; Tysons (VA); On-site; USD 120,000 - 170,000; Full time

Job summary

Cellebrite's Threat Ops team is expanding, and we are looking for a Cyber Threat Analyst to join our first line of defense. You will monitor security events, respond to incidents, and help automate security processes to strengthen defenses across our environments.

The role requires 5+ years as a Tier 2 analyst, hands-on SIEM, XSOAR playbooks, threat hunting, and cloud platform experience. US citizenship with clearance eligibility is preferred; this is a remote role with a preference for

Qualifications

• Minimum 5 years experience as a Tier 2 Cyber Threat Analyst.
• Certifications: Security+ or CEH.
• Proven experience with SIEM (Rules, Parsing, Correlation, Investigation).
• Proven experience with Playbooks (e.g. Palo Alto XSOAR).
• Proven experience with Threat Hunting.
• Familiarity with Cyber Kill Chain and MITRE ATT&CK.
• Experience with multi-cloud platforms (Azure, AWS).
• Strong knowledge of TCP/IP, networks, Active Directory, and file permissions.
• Experience with incident response reports and scripting (PowerShell, Python).
• Excellent communication, team player, organized, detail-oriented.
• US Citizenship with ability to obtain a clearance.
• Remote role, prefer candidates in the Eastern timezone.

Responsibilities

• Monitor and respond to security events, document actions and resolve incidents.
• Tune SIEM alerts and create new rules based on threat models.
• Threat Hunting - perform hunting activities.
• Vulnerability management reporting and stakeholder collaboration.
• Generate reports for IT admins, managers, and leadership on policy effectiveness.
• Advise and implement changes to counter attacks and automate processes.
• Document incidents to support IR and DR plans.
• Perform internal and external security audits.

Skills

Threat Hunting

SIEM expertise

Incident response

Communication

Scripting

Team player

Organization

Tools

Palo Alto XSOAR

XSOAR Playbooks

Azure

AWS

EDR

Active Directory

Job description

Cellebrite's Threat Ops team is expanding, and we are looking for a Cyber Threat Analyst to join our first line of defense. You will monitor security events, respond to incidents, and help automate security processes to strengthen defenses across our environments.

The role requires 5+ years as a Tier 2 analyst, hands-on SIEM, XSOAR playbooks, threat hunting, and cloud platform experience. US citizenship with clearance eligibility is preferred; this is a remote role with a preference for