Managed Detection and Response Analyst

Role overview Investigate and manage security alerts for endpoint and extended detection services, helping customers respond to potential threats. The analyst assesses severity, carries incidents through resolution, and works with experienced colleagues to improve response workflows and automation. The role follows a five-day, eight-hour schedule during office hours, with rotating weekend coverage.

Responsibilities - Review incoming EDR and XDR alerts, investigate activity, and determine incident severity. - Take response actions such as isolating affected workloads, following established playbooks. - Record investigation steps and maintain complete, accurate case documentation. - Coordinate with AI engineering colleagues to evaluate and improve automated triage and response. - Manage incidents from detection through resolution, escalating or seeking support when needed. - Communicate incident status and recommendations to customers by email and phone, and contribute to improved procedures and detection logic.

Requirements - Experience in a security operations center, managed detection and response, or IT security operations. - Understanding of EDR/XDR tools, incident workflows, common attacker techniques, and the MITRE ATT&CK framework. - Working knowledge of Windows, Active Directory, Linux, and networking. - Ability to analyze logs using tools such as Kibana or manual review, and familiarity with EDR, SIEM, or SOAR tools. - Clear written and spoken English at B2 level or higher, with strong attention to detail and customer communication skills. - Able to follow structured processes, document findings accurately, and learn new tools and techniques.

Nice to have - Interest in automation, threat hunting, and advanced incident response.