Contract Security Analyst specializing in security operations and incident response for cloud security at Embark. Focus on alert handling, detection engineering, and data loss prevention.
About the role
- Security Analyst managing and validating AI-driven investigations into cybersecurity threats. Collaborating with engineering and product teams to enhance security monitoring capabilities.
Responsibilities
- Analyze and validate investigations completed by the AI Agents for accuracy, completeness, and risk
- Correlate data from various data sources including cloud, endpoint, identity, network, etc. to understand the full picture of a malicious activity
- Investigate malicious activity that the 7AI Agents responded to and understand the complexity of the attack that was stopped including the risk that was prevented for customers
- Use our advanced AI Agents to hunt in customer environments to detect and remediate emerging threats, ultimately contributing to detections that will be folded back into the product
- Assist customers with ongoing threat monitoring, triage, and prioritization of security alerts as needed but especially during incidents to resolve threats and secure the environment
- Proactively identify potential threats and anomalies in customer environments by reviewing logs and malicious findings
- Utilize your supreme communication skills to engage with customers who vary in their level of technical depth and focus (from SOC analysts to CISOs)
- Architect processes while we build out this elite organization to scale the operation sustainably while maintaining consistent quality
- Collaborate with the Engineering and Product teams, providing feedback on the customer experience and assist in optimizing and tuning the AI platform
- Stay current with emerging cybersecurity trends, vulnerabilities, and new attack techniques, especially the field of AI-driven attacks
Requirements
- 2+ years of experience in cyber security operations
- Comfortable with on call weekend shifts as needed
- Hands-on experience with investigating alerts and across multiple sources (endpoint, network, identity, email, cloud, etc.)
- Strong understanding of security monitoring tools (XDR, SIEM, IDS/IPS, IDP, etc.)
- Familiarity with log \ telemetry concepts
- Experience analyzing and investigating security alerts from multiple sources, including intrusion detection systems, network monitoring tools, and endpoint protection platforms
- Working knowledge of common attack techniques and frameworks (MITRE ATT&CK) and incident triage methodologies
- Strong analytical and problem-solving skills, with the ability to verify AI-driven analysis and make independent security decisions
- Data querying experience with SIEM querying technologies (SPL, KQL, FQL, SQL, etc) and familiarity with log / telemetry concepts
- Familiarity with Malware Analysis methods
- Great interpersonal skills with a service oriented mindset
- Proven track record of successfully collaborating in a team
- Prior experience in a Managed Services environment (Preferred)
- Incident Handling experience (Preferred)
- Relevant certifications: Security+, GSEC, GCIH (Preferred)
Benefits
- Offers Equity
Job title
Job type
Experience level
Salary
Degree requirement
Tech skills
Location requirements
Cyber Security Analyst providing security operations support for USAF Cloud One project. Engaging in incident response and cybersecurity compliance activities within a hybrid environment.
Cybersecurity Analyst responsible for monitoring, analyzing, and responding to security incidents in SOC. Developing detection rules and conducting threat - hunting campaigns within a hybrid work setup.
Information Security Analyst working with Optasia to enforce security controls and protect data. Collaborating on technical projects and auditing systems in a hybrid work environment.
Cyber Security Analyst investigating and responding to security events at A+E Global Media. Collaborating cross - functionally to improve detection and response processes.
Information Security Analyst handling security monitoring and incident response tasks for educational technology company. Collaborating with IT teams to enhance security measures and compliance.
Security Specialist providing comprehensive security support to USAFE - AFAFRICA operations. Drafting policies, conducting assessments, and collaborating with military leadership for force protection.
Senior Asset Security Analyst responsible for governance and security of assets at Afya. Ensuring protection of people and information while mitigating risks and complying with regulations.
Security Analyst (IAM) focusing on IAM design and governance for Whirr Crew's infrastructure. Enhancing security protocols and collaborating with various technical teams.
Cyber Security Analyst providing technical information security support at IntelePeer. Focus on Microsoft Defender administration and security compliance operations.