Senior Cyber Defense Analyst - SentinelOne & Threat Hunting

TechDigital Group; Cambridge (MA); Vor Ort; USD 140.000 - 190.000; Vollzeit

Zusammenfassung

Alnylam seeks a Strong Senior Cyber Defense Analyst to manage SentinelOne EDR, monitor endpoint security, and drive incident response across Research, Clinical, Manufacturing, Quality, and Corporate functions. The role includes threat hunting, alert triage, and coordinating with Infrastructure, Cloud, and Compliance teams to mitigate risks.

Responsibilities cover phishing review, BEC, malware, ransomware threats, and vulnerability management assistance, with emphasis on regulated environments

Qualifikationen

• Senior Cyber Defense Analyst with hands-on experience in monitoring, detection, and incident response.
• Experience administering and optimizing SentinelOne EDR platforms and related security tooling.
• Strong ability to coordinate vendor support and align security with regulated environments.

Aufgaben

• Monitor endpoint security and respond to threats across multiple environments.
• Triage, investigate, and document security incidents; escalate as needed.
• Develop and maintain incident response playbooks, SOPs, and runbooks.
• Support audits, risk assessments, and vendor risk reviews.

Kenntnisse

Azure Sentinel

Cyber Threat Intel. Services

EDR

Framework design

SentinelOne

Endpoint Protect.

Tools

Microsoft 365

Azure

AWS

Active Directory

Entra ID

Jobbeschreibung

Top Skills Required :

1.Azure Sentinel,
2.Cyber Threat Intell. Services,
3.EDR, Framework design,
4.SentinelOne
5.Endpoint Protec.

Job Description/ Responsibilities :

Strong Senior Cyber Defense Analyst in the administration, optimization, and operational management of the SentinelOne EDR platform. Responsibilities include endpoint security monitoring, threat detection and response, troubleshooting security incidents, coordinating vendor support cases, and supporting cybersecurity requirements across Research, Clinical, Manufacturing, Quality, and Corporate functions. The resource will also assist in monitoring and responding to ZeroFox alerts, performing alert triage, validation, investigation, risk assessment, documentation, and escalation activities to ensure timely mitigation of potential cybersecurity threats.

Additional Alnylam-Relevant Responsibilities
• Support cybersecurity operations for GxP-regulated systems supporting Clinical, Quality, Manufacturing, and Laboratory environments.
• Monitor and investigate security events across Microsoft 365, Azure, AWS, Active Directory, Entra ID, and cloud-based applications.
• Perform threat hunting activities using EDR, SIEM, threat intelligence, and cloud security tools.
• Review and respond to security incidents affecting laboratory systems, manufacturing systems, research environments, and business applications.
• Support cybersecurity requirements for validated systems, electronic records, and regulated data environments.
• Collaborate with Infrastructure, Cloud, Manufacturing, Quality Assurance, Compliance, and Application teams to remediate security risks.
• Analyze phishing attempts, business email compromise (BEC), malware, ransomware, insider threats, and suspicious user activities.
• Assist with vulnerability management activities, including risk assessment, remediation tracking, and security exception reviews.
• Develop and maintain Incident Response Playbooks, SOPs, Disaster Recovery, and Cybersecurity Runbooks.
• Support cybersecurity audits, vendor risk assessments, and compliance reviews.