Threat Hunter Security Analyst II (Hybrid)

State of Oregon; Salem (OR); Hybride; USD 76 000 - 115 000; Plein temps

Avantages offerts par ce poste

Health coverage

Paid time off

Career development

Résumé du poste

State of Oregon is seeking a Security Analyst II – Threat Hunter (ISS7) in Salem. The role focuses on proactive threat hunting, monitoring Defender for Endpoint, Defender XDR, and Microsoft Sentinel to detect and triage security incidents across state agencies.

You will need strong experience in MS 365 security, cloud apps, and MITRE ATT&CK alignment, with a track record of fast, accurate investigations and collaboration across IT teams.

Qualifications

• Six years of information systems experience with Defender for Endpoint, Identity, Office 365, Cloud Apps, ASR, device timeline, evidence & response actions, Live response sessions and EDR forensics.
• Associate’s or higher education plus four years of related experience in Defender for Endpoint, Identity, Office 365, and Cloud Apps, ASR, and EDR forensics.
• Bachelor’s degree plus two years of related experience in Defender for Endpoint, Identity, Office 365, and Cloud Apps, ASR, and EDR forensics.

Responsabilités

• Monitor Microsoft Sentinel and Defender XDR for security threats and perform initial triage of alerts.
• Provide timely, actionable notification and escalation for incident response to protect state agencies.

Connaissances

Defender for Endpoint

Identity

Office 365

Cloud Apps

ASR

EDR forensics

Formation

Associate's degree in CS/IT or related field

Two-year vocational IT program + 4 years experience

Bachelor's degree in IT/CS or related field

Master's degree may substitute for all above

Outils

Microsoft Sentinel

Defender XDR

UEBA

KQL

Description du poste

State of Oregon is seeking a Security Analyst II – Threat Hunter (ISS7) in Salem. The role focuses on proactive threat hunting, monitoring Defender for Endpoint, Defender XDR, and Microsoft Sentinel to detect and triage security incidents across state agencies.

You will need strong experience in MS 365 security, cloud apps, and MITRE ATT&CK alignment, with a track record of fast, accurate investigations and collaboration across IT teams.