Senior Cybersecurity Analyst: Incident Response & Threat Hunting

MACHINE LEARNING TECHNOLOGIES LLC; Minneapolis (MN); Sur place; USD 110 000 - 160 000; Plein temps

Résumé du poste

MACHINE LEARNING TECHNOLOGIES LLC in Minneapolis seeks a Senior Cybersecurity Analyst to support and strengthen security operations, threat detection, incident response, and data protection initiatives.

The role involves investigating incidents across cloud, endpoints, and identity, tuning SIEM alerts, and developing KQL-based detections. Collaboration with stakeholders is essential to improve overall security posture.

Qualifications

• 8+ years of cybersecurity experience in operations, incident response, threat detection, governance, or compliance.
• Hands-on with SIEM platforms, preferably Microsoft Sentinel.
• Experience writing and modifying KQL queries.
• Knowledge of NIST, CIS Controls, or similar standards.
• Experience with endpoint protection, identity security, email security, vulnerability management, and cloud security.
• Familiarity with DLP, information classification, and audit monitoring.
• Strong analytical, troubleshooting, and investigative skills.
• Ability to communicate with both technical and non-technical stakeholders.
• Experience with Microsoft 365 security technologies and cloud security operations preferred.
• Relevant certifications such as Security+, CySA+, SC-200, SC-300, CISSP or equivalent are preferred.

Responsabilités

• Investigate and respond to cybersecurity incidents across cloud, endpoint, identity, email, application, and network environments.
• Monitor and maintain security events within a SIEM environment, including alert triage, threat analysis, and incident escalation.
• Develop and leverage KQL queries for investigations, reporting, threat hunting, and detection tuning.
• Support incident response activities including containment, remediation, recovery, and post-incident reviews.
• Enhance security monitoring capabilities by reducing false positives, identifying gaps, and improving detection coverage.
• Assist with data protection initiatives including DLP investigations, information protection, insider risk monitoring, auditing, and eDiscovery activities.
• Participate in security risk assessments, control reviews, vendor evaluations, and compliance-related initiatives.
• Create and maintain security procedures, runbooks, metrics, and technical documentation.
• Collaborate with stakeholders across the business to communicate risks, findings, and recommended security improvements.
• Participate in an on-call rotation supporting critical cybersecurity incidents.

Connaissances

Analytical thinking

Problem solving

Effective communication

Stakeholder collaboration

Outils

Microsoft Sentinel

KQL

Microsoft 365 Security

DLP tools

Description du poste

MACHINE LEARNING TECHNOLOGIES LLC in Minneapolis seeks a Senior Cybersecurity Analyst to support and strengthen security operations, threat detection, incident response, and data protection initiatives.

The role involves investigating incidents across cloud, endpoints, and identity, tuning SIEM alerts, and developing KQL-based detections. Collaboration with stakeholders is essential to improve overall security posture.