Senior MDR Analyst: Leadless Threat Hunting (Day Shift)

Blackpoint Holdings, LLC; United States; On-site; USD 110,000 - 140,000; Full time

Benefits offered by this job

Health insurance

Vision insurance

Dental insurance

Life insurance

401(k) plan

Discretionary Time Off

Other minor perks

Job summary

Blackpoint Cyber is seeking an experienced security analyst to join its SOC, leading leadless threat hunting and incident analysis across diverse customer environments.

You will collaborate with MDR teams, develop incident reports, and help shape operational processes to enhance SOC efficiency. A strong Windows/Linux/macOS foundation and ELK expertise are essential, with cloud exposure across AWS and Azure preferred.

Qualifications

• Five (5+) years of experience in an information security role.
• Experience working in a Security Operations Center (SOC).
• Two (2+) years of experience with triaging endpoint events from EDR, NGAV, and supporting the IR process.
• Deep knowledge on assessing threat indicators in a Windows environment (malware/anomalies/activity).
• Robust understanding of at least two of Windows, Linux or OSX.
• Familiarity with ELK stack and scripting: PowerShell, Python, and Go.
• Familiarity with AWS services (EC2, S3, IAM) and Azure/M365.
• Experience in leadless threat hunting analysis and incident reporting.

Responsibilities

• Analyze and evaluate anomalous network and system events in a SOC environment via leadless threat hunting.
• Collaborate with MDR Analysts to research threats and escalate advanced intrusion analysis.
• Develop incident analysis reports and coordinate with business units and customers to close issues.
• Help design and implement operational processes to improve SOC efficiency.
• Provide actionable threat and vulnerability analysis across customer environments.
• Build test lab environments to research emerging techniques and contribute to knowledge development.
• Review sandbox technologies for additional IOCs from artifacts.

Skills

SOC experience

EDR triage

Threat hunting

Windows security

OSX/Linux knowledge

ELK stack

PowerShell

Python

Go

AWS/Azure

IR collaboration

Communication

Education

Bachelor’s Degree in CS or related

Tools

ELK Stack

PowerShell

Python

Go

AWS

Azure

Job description

Blackpoint Cyber is seeking an experienced security analyst to join its SOC, leading leadless threat hunting and incident analysis across diverse customer environments.

You will collaborate with MDR teams, develop incident reports, and help shape operational processes to enhance SOC efficiency. A strong Windows/Linux/macOS foundation and ELK expertise are essential, with cloud exposure across AWS and Azure preferred.