MDR Analyst (Unit 42)

Role overview Monitor customer environments for security threats and help guide incidents from initial alert through investigation, response, and remediation. You will use endpoint detection tools to assess suspicious activity, communicate clearly with customers, and work with research and threat hunting specialists to improve detection and response.

Responsibilities - Manage security incidents through detection, analysis, response, remediation, and customer updates. - Investigate endpoint detection alerts, determine likely causes, and recommend or carry out appropriate response actions. - Coordinate with customers around monitoring and incident response needs. - Share findings with security research, threat intelligence, and threat hunting teams to support investigation of emerging threats. - Provide product, research, and engineering teams with feedback that can improve security tools and processes.

Requirements - At least two years of experience in a multi-tier security operations center or incident response role. - Experience with security technologies such as endpoint detection and response, SIEM, and next-generation firewalls. - Familiarity with common cyberattack patterns and adversary tactics, techniques, and procedures. - Strong written and spoken English communication skills.

Nice to have - Experience with Cortex XDR or Cortex XSOAR. - Certifications such as GIAC GCIH or GCFA, CompTIA CySA+, or Certified Ethical Hacker. - Basic static or dynamic malware analysis experience.