Threat Hunter & Incident Response Analyst

Divvy Cloud Corp.; Northern (KY); Hybrid; USD 82,000 - 110,000; Full time

Job summary

Rapid7 is seeking a Security Operations Analyst to review alert data and identify malicious activity within the Rapid7 environment. You will lead investigations, collect evidence, and document technical analyses to support remediation efforts.

You will perform rotational threat hunting, assist Incident Response engagements, and provide high-quality threat detection services. Candidates should be proficient with Windows, macOS, Linux, and SIEM tools such as Rapid7's platform or Splunk.

Qualifications

• Experience with SIEM tools (Rapid7 or Splunk) and security monitoring.
• Strong background in SOC functions: incident response, threat hunting, and forensics.
• Proven ability to lead investigations, document findings, and drive remediation actions.

Responsibilities

• Review alert data to identify malicious activity in the Rapid7 environment.
• Lead investigations spanning evidence collection, analysis, intrusion vector determination, and misuse detection.
• Create detailed Incident Reports with findings and remediation steps.
• Perform rotational threat hunting to uncover unknown threats.
• Assist Incident Response engagements by analyzing forensic artifacts and tracking threat actor movements.
• Provide high-quality threat detection services to secure the organization.
• Research current attack methods to enhance detection capabilities.
• Offer feedback to product teams to improve security features.

Skills

Windows

macOS

Linux

SIEM tools

Threat hunting

Incident response

Forensic investigations

Tools

Rapid7 Platform

Splunk

Job description

Rapid7 is seeking a Security Operations Analyst to review alert data and identify malicious activity within the Rapid7 environment. You will lead investigations, collect evidence, and document technical analyses to support remediation efforts.

You will perform rotational threat hunting, assist Incident Response engagements, and provide high-quality threat detection services. Candidates should be proficient with Windows, macOS, Linux, and SIEM tools such as Rapid7's platform or Splunk.