Principal Security Analyst - AI-Driven MDR & SOC Lead

Critical Start, Inc.; Washington (District of Columbia); Presencial; USD 80.000 - 95.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Health benefits

Unlimited PTO

Parental and Military Leave

401(k) Plan with Matching

Life Insurance and Disability coverage

Wellness initiatives

Descripción de la vacante

Critical Start, Inc. is seeking a Principal Security Analyst to triage MDR alerts, analyze events, and guide incident response with AI-augmented tools.

You will act as a SME in the MDR platform, work with EDR/SIEM suites (Microsoft Defender for Endpoint, CrowdStrike Falcon, Cortex XDR), and craft playbooks to improve detection and response. The role emphasizes strong analytical and communication skills, operating on high-severity incidents, and ensuring robust cyber defense measures across

Formación

• 12 months of SOC tenure or equivalent experience.
• CySA+ certification or equivalent.
• Understanding of AI usage within security workflows.

Responsabilidades

• Initial triage of MDR alerts and 24x7 monitoring participation.
• Analyze events, alerts, and threat data to investigate potential attacks.
• Recommend and implement response actions with supervisor approval.
• Create and review playbooks and automations for MDR SOAR workflows.
• Engage in client communications during high-severity incidents.

Conocimientos

SOC experience

CySA+ Certification

EDR

SIEM

AI in security

Analytical skills

Communication skills

Herramientas

Microsoft Defender for Endpoint

CrowdStrike Falcon

Palo Alto Cortex XDR

Microsoft Defender Suite

Descripción del empleo

Critical Start, Inc. is seeking a Principal Security Analyst to triage MDR alerts, analyze events, and guide incident response with AI-augmented tools.

You will act as a SME in the MDR platform, work with EDR/SIEM suites (Microsoft Defender for Endpoint, CrowdStrike Falcon, Cortex XDR), and craft playbooks to improve detection and response. The role emphasizes strong analytical and communication skills, operating on high-severity incidents, and ensuring robust cyber defense measures across