Senior Security Analyst — 24/7 MDR & SIEM Expert

Critical Start, Inc.; Austin (TX); On-site; USD 60,000 - 70,000; Full time

Benefits offered by this job

Health benefits

Unlimited PTO

Parental leave

Life insurance

401(k) plan

Employee assistance program

Wellness initiatives

Job summary

Critical Start, Inc. is seeking a Senior Security Analyst to join our 24x7 MDR operations. You will triage alerts, analyze events, and recommend response actions to mitigate threats.

The role requires Security+ certification and hands-on work with EDR, SIEM, and multiple security platforms. You will act as a Subject Matter Expert within our platform, develop playbooks and automations, and coordinate with clients during high-severity incidents.

Qualifications

• Minimum 6 months of SOC tenure or equivalent experience.
• Security+ certification or equivalent required.
• Proficiency with EDR, SIEM, and security platforms (e.g., Defender, CrowdStrike, Sentinel, Splunk).
• Ability to create/review playbooks and automations to improve efficiency and accuracy.
• Strong analytical and client-communication skills.

Responsibilities

• Initial triage of MDR alerts during 24x7 monitoring.
• Approve security escalations and ensure accuracy before customer delivery.
• Create and approve MDR playbooks and automations; maintain documentation.
• Communicate with clients during high-severity investigations.
• Serve as SME for the platform and navigate the ZTAP console.
• Verify execution of console actions to ensure two-person integrity.

Skills

SOC monitoring

Security+ Certification

MDR/SOAR orchestration

Client communications

Analytical skills

Tools

Microsoft Defender for Endpoint

CrowdStrike Falcon

Palo Alto Cortex XDR

VMware EDR

Trend Micro Vision One

Microsoft Sentinel

Splunk

Devo

Job description

Critical Start, Inc. is seeking a Senior Security Analyst to join our 24x7 MDR operations. You will triage alerts, analyze events, and recommend response actions to mitigate threats.

The role requires Security+ certification and hands-on work with EDR, SIEM, and multiple security platforms. You will act as a Subject Matter Expert within our platform, develop playbooks and automations, and coordinate with clients during high-severity incidents.