Senior Cybersecurity Analyst: Threat Detection & IR(Hybrid)

VDart Inc; Sacramento (CA); Hybride; USD 82 656 - 130 872; Plein temps

Résumé du poste

VDart Inc. is seeking a Senior Cybersecurity Analyst for a Sacramento, CA hybrid contract engagement. The role requires strong threat detection, incident response, and governance capabilities, with hands-on work across SIEM, EDR, and DLP tools.

You will lead investigations, analyze security logs, and collaborate with IT teams to improve the organization’s security posture while driving incidents to resolution.

Qualifications

• Experience in threat detection and incident investigations using SIEM/EDR/DLP tools.
• Ability to document incidents and provide RCA.
• Familiarity with safeguarding security posture and governance.

Responsabilités

• Threat Detection and Response: Monitor and analyze security events on SIEM/EDR/DLP platforms to identify threats.
• Incident Investigation: Conduct in-depth investigations and provide RCA.
• Escalation Handling and Team Management: Manage L1 resources and handle escalations.
• Security Log Analysis: Analyze logs to identify trends and anomalies and drive closure.
• Vulnerability Management: Perform threat and vulnerability assessments and mitigation guidance.
• Security Advisory: Provide guidance on best practices and security advisories.
• Collaboration: Work with IT and security teams to enhance security posture.
• Driving Attitude: Drive incident investigations and bridge calls.
• Documentation: Maintain records of incidents and actions for governance.
• Desirable Tool Stack: include SIEM, EDR, DLP, UEBA considerations.

Connaissances

Threat detection

Incident response

Security analytics

Collaboration

Documentation

Formation

Bachelor's degree in CS/Engineering/IT

Master's degree in relevant field (preferred)

Outils

SIEM: Splunk

EDR: CrowdStrike

EDR: Defender

EDR: SentinelOne

DLP: Forcepoint

DLP: Symantec/Proofpoint

Description du poste

VDart Inc. is seeking a Senior Cybersecurity Analyst for a Sacramento, CA hybrid contract engagement. The role requires strong threat detection, incident response, and governance capabilities, with hands-on work across SIEM, EDR, and DLP tools.

You will lead investigations, analyze security logs, and collaborate with IT teams to improve the organization’s security posture while driving incidents to resolution.