Senior MDR Analyst: 24/7 Threat Detection & Analysis

Blackpoint Cyber; United States; On-site; USD 110,000 - 170,000; Full time

Benefits offered by this job

Health, Vision, Dental, Life Insurance

401k plan

Discretionary Time Off

Equity participation

Job summary

Blackpoint Cyber is seeking an experienced security professional to join our 24x7 SOC as a leadless threat hunter. You will analyze anomalous network events, collaborate with MDR analysts, and develop incident analysis reports to close issues across customer environments.

The role requires deep Windows/Linux security knowledge, hands-on experience with EDR/NGAV, and proficiency in scripting (PowerShell, Python, Go). We offer a high-performance culture and extensive benefits.

Qualifications

• Five or more years in information security roles.
• Experience in Security Operations Center (SOC).
• Experience triaging endpoint events from EDR/NGAV and IR support.
• Knowledge of Windows security artifacts and forensic artifacts.
• Broad familiarity with Windows/Linux/macOS ecosystems.
• Experience with ELK stack and scripting languages (PowerShell, Python, Go).
• Experience with AWS (EC2/S3/IAM) and Azure/M365.

Responsibilities

• Analyze and evaluate anomalous events in a 24x7 SOC environment.
• Collaborate with MDR Analysts on threats and escalation for advanced intrusion analysis.
• Develop incident analysis reports across business units and customers.
• Design and improve SOC processes to increase efficiency.
• Provide threat and vulnerability analyses based on security events.

Skills

InfoSec experience

SOC experience

Threat hunting

IR process

Windows security

ELK stack

PowerShell

Python

Go

AWS

Azure

Communication

Analytical thinking

Education

Bachelor’s Degree in CS or related

Tools

ELK stack

AWS

Azure

Job description

Blackpoint Cyber is seeking an experienced security professional to join our 24x7 SOC as a leadless threat hunter. You will analyze anomalous network events, collaborate with MDR analysts, and develop incident analysis reports to close issues across customer environments.

The role requires deep Windows/Linux security knowledge, hands-on experience with EDR/NGAV, and proficiency in scripting (PowerShell, Python, Go). We offer a high-performance culture and extensive benefits.