Threat Detection & Incident Response Associate

The Blackstone Group L.P.; Miami (FL); On-site; USD 110,000 - 170,000; Full time

Benefits offered by this job

Medical benefits

Dental benefits

Vision benefits

401(k) plan

Discretionary bonuses

Job summary

Blackstone seeks an Alert, Detection, and Response Associate to join the Technology & Innovations team in the US. You will manage incident queues, investigate threats across email, endpoint, cloud, and identity, and craft detections to reduce noise while coordinating with Tier 1 and Tier 2 analysts.

You will work with AI-assisted tooling, develop playbooks, and mentor junior analysts. A strong background in SIEM, EDR, cloud security, and incident response is required, with a focus on rigorous

Qualifications

• Hands-on security operations experience.
• End-to-end security investigations in SOC/IR.
• Experience writing and troubleshooting SIEM queries.

Responsibilities

• Manage incident queue across email, endpoint, identity, network, and cloud.
• Handle escalations from Tier 1 analysts.
• Investigate in SIEM, write searches, refine detections.
• Conduct endpoint investigation and live response in EDR platform.
• Investigate email threats and cloud/identity compromise.

Skills

Security operations

Incident response

SIEM queries

Python scripting

Education

B.S. in Computer Science or related field

Tools

Splunk/SPL

Microsoft Defender for Endpoint

Okta ID

Job description

Blackstone seeks an Alert, Detection, and Response Associate to join the Technology & Innovations team in the US. You will manage incident queues, investigate threats across email, endpoint, cloud, and identity, and craft detections to reduce noise while coordinating with Tier 1 and Tier 2 analysts.

You will work with AI-assisted tooling, develop playbooks, and mentor junior analysts. A strong background in SIEM, EDR, cloud security, and incident response is required, with a focus on rigorous