Senior Threat Detection & Bot Defense Analyst

Sigma Software; United States; Remote; USD 110,000 - 150,000; Full time

Job summary

Sigma Software is seeking a Senior Cyber Security Analyst to join a team focused on identifying, investigating, and mitigating malicious web activity across large-scale digital environments. The role blends threat analysis, traffic investigation, and detection engineering with direct collaboration with customers and internal engineering teams to improve protection and threat visibility.

You will work with high-volume datasets, analyze suspicious behavior, and contribute to the ongoing

Qualifications

• 3–5 years of experience in Cybersecurity, Threat Research, or Threat Intelligence.
• Bachelor's degree in Computer Science, Cybersecurity, Information Security, or a related field.
• Strong understanding of web technologies and networking fundamentals.
• Experience in web security research, bot management, fraud detection, or related domains.
• Hands-on experience with log analysis and investigation platforms such as Kibana/OpenSearch, Snowflake, Datadog.
• Strong SQL skills and experience with large datasets.
• Basic knowledge of JavaScript for analysis.
• Strong communication and collaboration skills.
• Ability to work independently with minimal supervision.
• Passion for cybersecurity and continuous learning.

Responsibilities

• Monitor and investigate potential security threats using Kibana/OpenSearch and Snowflake.
• Analyze security logs and investigate suspicious or unusual activity, including spikes in traffic, unexpected changes in attack patterns, and new or disappearing attack signals.
• Determine whether detected activity is malicious or benign and identify the appropriate response, including detection engineering to block malicious activity when needed.
• Develop, tune, and deploy detection rules based on traffic behavior, HTTP request attributes, headers, device fingerprints, and other indicators to mitigate malicious activity.
• Monitor existing detections and known attack patterns to make sure they continue to work as expected and identify any unusual changes in volume, sources, IPs, domains, or other indicators.
• Support customer onboarding by analyzing web application traffic flows and configuring baseline detection and protection rules.
• Investigate customer-reported incidents and missed detections, analyze attack traffic, and implement mitigations to improve protection coverage.
• Document newly discovered threats and attacks, including evidence, findings, and indicators.
• Communicate findings to Engineering and other stakeholders and provide the necessary technical details to support remediation and improvements to detection and protection mechanisms.
• Partner directly with counterparts through a ticketing system and support portal to investigate issues, provide updates, and resolve security-related requests.

Skills

Web technologies

Networking fundamentals

SQL skills

JavaScript basics

Analytical thinking

Independent work

Communication skills

Threat hunting

Incident response

Threat intelligence

Education

Bachelor's degree in Computer Science, Cybersecurity, Information Security, or related field

Tools

Kibana/OpenSearch

Snowflake

Datadog

GitHub

Jupyter Notebook

Python

Job description

Sigma Software is seeking a Senior Cyber Security Analyst to join a team focused on identifying, investigating, and mitigating malicious web activity across large-scale digital environments. The role blends threat analysis, traffic investigation, and detection engineering with direct collaboration with customers and internal engineering teams to improve protection and threat visibility.

You will work with high-volume datasets, analyze suspicious behavior, and contribute to the ongoing