Senior Cyber Defense & Incident Response Analyst

Ethereum Technologies; Minneapolis (MN); On-site; USD 110,000 - 170,000; Full time

Job summary

Ethereum Technologies in Minneapolis seeks a seasoned Cybersecurity Analyst to strengthen security operations, threat detection, and incident response. You will investigate threats across cloud, endpoints, and networks, while developing robust KQL-based detections and running security control improvements.

The role emphasizes collaboration with stakeholders, DLP and data protection efforts, and contributing to risk assessments and compliance initiatives.

Qualifications

• 8+ years of cybersecurity experience including security operations and incident response.
• Hands-on with SIEM platforms, preferably Microsoft Sentinel.
• Experience writing and modifying KQL queries.
• Knowledge of NIST, CIS Controls, or similar frameworks.
• Experience with endpoint protection, identity security, email security, vulnerability management, and cloud security.
• Familiarity with DLP, information classification, and audit monitoring.
• Strong analytical and investigative skills; able to communicate with technical and non-technical stakeholders.
• Certifications such as Security+, CySA+, SC-200/SC-300, CISSP preferred.

Responsibilities

• Investigate and respond to cybersecurity incidents across cloud, endpoint, identity, email, applications, and network environments.
• Monitor and triage security events in a SIEM; analyze threats and escalate incidents.
• Develop and use KQL queries for investigations and detection tuning.
• Assist with containment, remediation, recovery, and post-incident reviews.
• Reduce false positives and improve detection coverage.
• Support data protection activities including DLP investigations and auditing.
• Participate in risk assessments, control reviews, and vendor evaluations.
• Create runbooks, metrics, and security documentation.
• Collaborate with stakeholders to communicate risks and improvements.
• Participate in on-call rotation for critical incidents.

Skills

SIEM experience

KQL queries

Security frameworks

Cloud security

Communication

8+ years experience

Tools

Microsoft Sentinel

KQL

Microsoft 365 security

Job description

Ethereum Technologies in Minneapolis seeks a seasoned Cybersecurity Analyst to strengthen security operations, threat detection, and incident response. You will investigate threats across cloud, endpoints, and networks, while developing robust KQL-based detections and running security control improvements.

The role emphasizes collaboration with stakeholders, DLP and data protection efforts, and contributing to risk assessments and compliance initiatives.