Embedded Cyber Detection and Response Analyst

Overview

In this role you will operate within a 24/7 Cyber Detection and Response team to identify, analyze, and respond to threats across endpoints, networks, cloud, and identity systems. You will work with Security Engineering and stakeholders to tune detections and improve controls, while following established incident response playbooks. The position emphasizes hands-on investigation, threat hunting, and incident documentation to drive rapid remediation and root-cause analysis. This contract role offers exposure to security operations at scale and cross-functional collaboration.

Responsibilities

• Monitor, triage, and investigate security alerts across endpoints, networks, cloud, and identity systems
• Support incident response activities including analysis, containment, remediation, and documentation
• Execute incident response playbooks and contribute to their improvement
• Perform threat hunting to identify compromises and gaps in detection
• Leverage threat intelligence to inform investigations and tuning
• Collaborate with Security Engineering to tune detection logic and controls
• Produce clear incident reports and support root cause analysis
• Support on-call rotations and 24/7 escalation processes

Key requirements

• 3–5 years of cybersecurity experience focusing on incident response, SOC operations, or cyber defense
• Hands-on experience with SIEM, EDR/XDR, and log analysis tools (e.g., Splunk, Sentinel, CrowdStrike)
• Understanding of incident response methodologies and frameworks (MITRE ATT&CK, NIST)
• Familiarity with threat hunting, malware analysis, or forensic techniques
• Experience with cloud environments (AWS, Azure, GCP) and modern enterprise architectures preferred
• Strong analytical and problem-solving skills with clear communication of technical findings
• Relevant certifications (e.g., Security+, GCIH, GCIA) are a plus

• Analytical thinking
• Clear written and verbal communication
• Team collaboration
• SIEM
• EDR/XDR
• log analysis

Full job description from WhatJobs. Apply for this role →