MDR Analyst — Tier 3 Washington DC, Virginia, Maryland, or US Remote View Role

Apsispoint; Washington (District of Columbia); Remote; USD 120,000 - 180,000; Full time

Job summary

Apsispoint is seeking a Senior SOC Analyst to lead major incidents, run proactive threat hunts, and mentor analysts across tiers. You will build detections, automation, and playbooks while performing advanced malware and DFIR analysis.

Ideal candidates have 5+ years in SOC/IR/threat hunting, strong KQL/detection engineering skills, and Azure security expertise. Certifications such as GCIH/GCFA/OSCP are highly valued.

Qualifications

• 5+ years in SOC, incident response, or threat hunting roles.
• Deep KQL and detection engineering experience.
• Cloud security depth in Azure (AWS/GCP a plus).
• Advanced certification such as GCIH, GCFA, GREM, or OSCP is a plus.

Responsibilities

• Lead response for complex, high-severity incidents from detection through eradication.
• Run hypothesis-driven threat hunts and turn findings into new detections.
• Build and maintain detection content, playbooks, and SOAR/automation logic.
• Perform advanced analysis — malware triage, forensic artifacts, and adversary tradecraft.
• Partner with detection engineering and purple-team efforts to close coverage gaps.
• Mentor Tier 1 and Tier 2 analysts and set technical standards for the team.

Skills

SOC experience

Incident response

Threat hunting

Detection engineering

Azure security

Scripting

DFIR skills

Education

Cybersecurity certifications

Tools

Microsoft Sentinel

SOAR

Job description

Washington DC, Virginia, Maryland, or US Remote Full-time

About the Role

You are a senior technical authority in our SOC — leading major incidents, running proactive threat hunts, building the detections and automation the whole team relies on, and mentoring analysts across every tier.

What You'll Do

• Lead response for complex, high-severity incidents from detection through eradication
• Run hypothesis-driven threat hunts and turn findings into new detections
• Build and maintain detection content, playbooks, and SOAR/automation logic
• Perform advanced analysis — malware triage, forensic artifacts, and adversary tradecraft
• Partner with detection engineering and purple-team efforts to close coverage gaps
• Mentor Tier 1 and Tier 2 analysts and set technical standards for the team

What You'll Bring

• 5+ years in SOC, incident response, or threat hunting roles
• Deep KQL and detection engineering expertise (Sentinel content development a plus)
• Strong DFIR skills and familiarity with malware analysis techniques
• Cloud security depth in Azure (AWS/GCP a plus)
• Advanced certification such as GCIH, GCFA, GREM, or OSCP
• Proven scripting/automation ability

Nice to Have

• Published research or conference talks
• Experience building SOAR automation at scale
• Reverse engineering / threat intelligence background

Apsispoint is an equal opportunity employer committed to building a diverse and inclusive team.