Cyber Detection and Response Analyst

Cyber Detection and Response Analyst

The Cyber Detection and Response Analyst supports day-to-day detection, investigation, and response activities as part of a Cyber Detection and Response Team (DART). This is a hands-on technical role focused on identifying, analyzing, and responding to cyber threats across the client’s environment, working closely with Security Engineering and broader security stakeholders.

This role will be a part of a 24/7 team and cover one of two shifts: Sunday-Thursday 9:00 am-5:00 pm PT or Tuesday-Saturday 9:00 am-5:00 pm PT

• Monitor, triage, and investigate security alerts and events across endpoint, network, cloud, and identity systems.
• Support incident response activities including analysis, containment, remediation, and documentation.
• Execute established incident response playbooks and contribute to their continuous improvement.
• Perform threat hunting activities to identify potential compromises and gaps in detection coverage.
• Leverage threat intelligence to inform investigations and detection tuning.
• Collaborate with Security Engineering to tune detection logic and improve security controls.
• Produce clear, concise incident reports and support root cause analysis and remediation efforts.
• Support escalation processes as part of a 24/7 detection and response capability.