MDR Threat Detection Analyst – Incident Response

Malwarebytes; United States; Remote; USD 52,000 - 71,000; Full time

Benefits offered by this job

Health coverage

Referral bonus

Wellness programs

Time off policy

Mission impact

Job summary

ThreatDown is seeking a motivated MDR Associate Analyst to defend customers by detecting, containing, and remediating advanced threats. You will focus on real-time incident detection, validation, remediation, and reporting within a collaborative SOC team.

The role requires curiosity, strong research capabilities, and a proactive approach to evolving cyber threats and technologies. Work schedule is Monday–Friday, 5PM–1AM, with comprehensive benefits and opportunities to impact security posture.

Qualifications

• Bachelor's degree or 2+ years of related cybersecurity experience.
• Ability to gather and analyze information in a methodical and efficient manner.
• Willingness to work in a 5PM–1AM shift and support on-call activities.

Responsibilities

• Support 24/7/365 Managed Detection and Response efforts.
• Monitor and analyze log data and alerts in real-time; escalate and report validated incidents.
• Investigate and validate alerts and advise customers on remediation actions.
• Prepare incident reporting and provide peer review for reports.
• Manage and track customer issues and requests; identify process improvements.

Skills

Verbal communication

Written communication

Analytical skills

Team collaboration

Self-directed

Confidentiality

Problem solving

Interpersonal skills

Education

Bachelor's degree in Cybersecurity, CS, or related

2+ years of related experience

Tools

Windows

MacOS

Linux

Networking fundamentals

Job description

ThreatDown is seeking a motivated MDR Associate Analyst to defend customers by detecting, containing, and remediating advanced threats. You will focus on real-time incident detection, validation, remediation, and reporting within a collaborative SOC team.

The role requires curiosity, strong research capabilities, and a proactive approach to evolving cyber threats and technologies. Work schedule is Monday–Friday, 5PM–1AM, with comprehensive benefits and opportunities to impact security posture.