Threat Hunter & Incident Response Analyst

Novibet; Ohio; On-site; USD 90,000 - 130,000; Full time

Benefits offered by this job

Competitive pay

Health insurance

Top-notch equipment

Career growth

Shuttle/Carpool

Gym access

Inclusive environment

Team events

Job summary

Novibet is seeking a Threat Analyst to join its Cybersecurity Team. You will monitor alerts, investigate incidents, and transform security data into actionable insights to stay ahead of adversaries.

Your role includes proactive threat hunting, RCA documentation, and improving detection capabilities across SIEM/EDR environments, collaborating with IT, Cloud, and engineering teams to strengthen security posture.

Qualifications

• 2–5 years of experience in SOC, Blue Team, Incident Response, or Threat Detection roles.
• Strong understanding of attack techniques and adversary tactics (MITRE ATT&CK).
• Familiarity with threats such as malware, phishing, lateral movement, and privilege escalation.
• Hands-on experience with SIEM platforms (Splunk, Microsoft Sentinel, QRadar, Elastic, etc.) and EDR/XDR solutions (Microsoft Defender, CrowdStrike, SentinelOne, etc.).
• Experience analyzing logs from Windows, Linux, Active Directory, cloud platforms, and network devices.
• Understanding of network protocols and authentication flows (TCP/IP, DNS, HTTP/S).
• Familiarity with threat intelligence concepts such as IOCs, TTPs, and adversary behavior.

Responsibilities

• Investigate and triage security alerts generated by our SIEM and cybersecurity platforms.
• Perform in-depth analysis of security incidents across EDR, SIEM, cloud, and network environments.
• Validate alerts to determine whether they represent malicious activity and assess incident severity.
• Participate in incident response activities, including containment, eradication, and recovery.
• Conduct root cause analysis (RCA) and document findings to improve detection and response capabilities.
• Perform proactive threat hunting using hypotheses, telemetry analysis, and intelligence sources.
• Improve detection capabilities through alert tuning, detection engineering, and SOC playbooks.
• Collaborate with IT, Cloud, DevOps, and Engineering teams to strengthen the organization’s security posture.
• Contribute to SOC metrics, reporting, and post-incident reviews.

Skills

SOC Experience

MITRE ATT&CK

Threat Types

SIEM Expertise

EDR/XDR

Log Analysis

Networking Protocols

Threat Intelligence

Scripting

Tools

Splunk

Microsoft Sentinel

QRadar

Elastic

Defender

CrowdStrike

SentinelOne

Job description

Novibet is seeking a Threat Analyst to join its Cybersecurity Team. You will monitor alerts, investigate incidents, and transform security data into actionable insights to stay ahead of adversaries.

Your role includes proactive threat hunting, RCA documentation, and improving detection capabilities across SIEM/EDR environments, collaborating with IT, Cloud, and engineering teams to strengthen security posture.