Job SummaryJoin our elite Unit 42 team as a Senior Managed Detection and Response (MDR) Analyst to deliver top-tier security to global customers. In this critical role, you will detect and respond to complex cyber incidents, manage escalations, and lead tactical shift operations. We seek a proactive problem-solver who excels at analyzing threats using our Cortex Platform. This is a dynamic, remote, shift-based position covering global time zones, including weekends.
Key Responsibilities- Own the complete investigation and response lifecycle of security alerts across customer environments.
- Analyze complex endpoint, network, identity, and cloud telemetry to identify and mitigate malicious activity.
- Document and communicate critical findings and remediation actions to customers and internal teams.
- Collaborate with MDR management to drive operational shift execution, technical enhancements, and workflow improvements.
- Partner with Threat Intelligence and Security Research teams to improve detection and response capabilities.
Qualifications Qualifications- 5+ years of SOC, Incident Response, MDR, or Managed Security Services experience.
- Hands-on experience with EDR, SIEM, SOAR, and firewall technologies.
- Strong understanding of cyber threats, attack techniques, and incident response processes.
- Working knowledge of APT operations and the attack cycle, including propagation and lateral movement.
- Understanding of organizational cyber protection, security tools, and leveraged remediation techniques.
- Experience with investigative technologies such as SIEM, packet capture analysis, host forensics, and EDR tools.
- Strong interpersonal skills with proven experience collaborating effectively with customers.
- Flexibility to work overnight, weekend, and holiday shifts in a 24x7 MDR operation.
- U.S. citizenship is required for this role based on business and customer needs.
Preferred- Hands-on experience with Cortex XDR and/or Cortex XSOAR platforms.
- Previous experience working shift-based or overnight security operations.
- Active security certifications such as CySA+, CEH, or similar credentials.
- Prior experience working in a dedicated SOC or Incident Response environment
Compensation DisclosureThe compensation offered for this position will depend on qualifications, experience, and work location. For candidates who receive an offer at the posted level, the starting base salary (for non-sales roles) or base salary + commission target (for sales/com-missioned roles) is expected to be the annual range listed below. The offered compensation may also include restricted stock units and a bonus. A description of our employee benefits may be found here.
$127,600.00 - $189,200.00/yr