Senior MDR Analyst - Remote, West Coast Hours

SkyeBiz; Washington (District of Columbia); Teletrabalho; USD 105 000 - 120 000; Tempo integral

Resumo da oferta

SkyeBiz is seeking a Senior MDR Analyst to join our growing US MDR capability. This fully remote, permanent role targets West Coast business hours and requires an experienced analyst who can own complex security incidents from day one.

You will independently investigate, contain, and document incidents, act as escalation for US customers, and improve threat detection and playbooks while helping establish standards for the new SOC.

Qualificações

• Extensive MDR/SOC experience with independent ownership of complex incidents.
• Expertise with EDR/XDR and SIEM tools.
• Strong Windows Sysmon and PowerShell analysis.
• Threat hunting and detection engineering experience.
• Proficient in security incident reporting and customer communication.

Responsabilidades

• End-to-end ownership of incident response, including triage, investigation, containment, remediation, customer communication, and post-incident reviews.
• Advanced analysis of EDR/XDR and SIEM alerts, Windows, Sysmon, identity, email, cloud, and network telemetry.
• Threat hunting and detection engineering aligned to MITRE ATT&CK.
• Writing and tuning detection logic and security monitoring content.
• Leading customer-facing discussions and producing executive and technical reports.
• Supporting onboarding activities and validating monitoring coverage.
• Mentoring junior analysts and improving SOC processes.

Conhecimentos

MDR/SOC ops

Incident response

Threat hunting

Automation / SOAR

Customer communication

Security reporting

PowerShell

Cloud security (Azure/AWS)

Ferramentas

CrowdStrike

Microsoft Defender

SentinelOne

Microsoft Sentinel

QRadar

Splunk

Chronicle

Descrição da oferta de emprego

SkyeBiz is seeking a Senior MDR Analyst to join our growing US MDR capability. This fully remote, permanent role targets West Coast business hours and requires an experienced analyst who can own complex security incidents from day one.

You will independently investigate, contain, and document incidents, act as escalation for US customers, and improve threat detection and playbooks while helping establish standards for the new SOC.