Senior MDR Analyst

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Senior MDR Analyst based in the United States. Join a high-performance cybersecurity team dedicated to identifying, investigating, and neutralizing advanced cyber threats. As a Senior Managed Detection and Response (MDR) Analyst, you will play a key role in protecting customer environments by conducting independent threat hunting and analyzing suspicious network and system activity. You will investigate complex security incidents, support incident response efforts, and provide actionable intelligence to strengthen security defenses. Working closely with analysts and cross-functional teams, you will help refine operational processes and advance threat detection capabilities. This remote opportunity is suited to an experienced security professional who thrives on solving complex problems, sharing technical knowledge, and staying ahead of an evolving threat landscape. The position follows a Monday-to-Friday day shift while supporting operations within a 24/7/365 Security Operations Center (SOC).

As a Senior MDR Analyst, you will lead advanced threat investigations, identify suspicious activity across diverse customer environments, and help improve the effectiveness of security operations. You will also contribute to research, incident reporting, and the development of threat-hunting capabilities. Analyze anomalous network and system events through independent threat hunting within a 24/7/365 SOC environment. Collaborate with MDR Analysts to research emerging cybersecurity threats and serve as an escalation point for advanced intrusion analysis. Investigate security incidents and prepare clear, comprehensive incident analysis reports. Coordinate with internal business units and customers to resolve security issues and bring investigations to a successful conclusion. Provide actionable threat and vulnerability analysis based on security events across multiple independent customer environments. Design, develop, and improve operational processes and procedures to increase SOC efficiency and consistency. Build and maintain test lab environments to research emerging attack techniques and contribute to internal and external threat operations knowledge. Review sandbox technologies and analyze artifacts to identify additional indicators of compromise (IOCs). Refine threat-hunting methods to uncover potential incidents and communicate findings that strengthen detection and response capabilities. Requirements: The ideal candidate brings substantial hands-on information security experience, strong investigative skills, and a deep understanding of endpoint threats and operating systems. You should be comfortable conducting independent investigations, analyzing complex technical evidence, and communicating findings to both technical and non-technical audiences. At least 5 years of experience in an information security role. Relevant training and/or certifications may substitute for one year of experience. Previous experience working in a Security Operations Center (SOC). At least 2 years of experience triaging endpoint events using Endpoint Detection and Response (EDR) and Next-Generation Antivirus (NGAV) tools, along with supporting incident response processes. Strong knowledge of Windows threat indicators, including malware, malicious anomalies, abnormal network activity, root-level compromise, and forensic artifacts. Robust understanding of at least two of the following operating systems: Windows, Linux, or macOS. Familiarity with the ELK Stack, including dashboards, Logstash configuration, and search capabilities. Scripting or programming experience with PowerShell, Python, and Go. Familiarity with cloud environments and services, including AWS EC2, S3, and IAM, as well as Azure and Microsoft 365. Experience developing and executing independent threat-hunting investigations to uncover potential incidents and document findings. Excellent analytical, critical-thinking, and problem-solving skills, including the ability to identify anomalous patterns and break down complex issues. Strong written and verbal communication skills, with the ability to summarize and present technical findings clearly. Bonus qualifications: Bachelor's degree in Computer Science or a related technical discipline. Experience in network or system administration and/or engineering. Advanced forensic knowledge of Windows, macOS, and/or Linux environments. Experience in Digital Forensics and Incident Response (DFIR). Malware analysis experience, including behavioral or static analysis, IDA, Cuckoo Sandbox, or x86/x64 debugging. Experience in penetration testing or Red Team/Blue Team operations. Capture The Flag (CTF) development experience. Benefits: Competitive salary: Annual base salary of $115,000–$128,000 USD, excluding any discretionary bonus. Final compensation depends on location, experience, skills, and other job-related factors. Equity participation: Opportunity to share in the organization's success through equity, with program details varying by location and employment structure. Health coverage: Medical, dental, vision, and life insurance plans for eligible US employees. Retirement savings: A robust 401(k) plan. Paid time off: Discretionary Time Off (DTO). Remote work: Fully remote position within the United States. Predictable schedule: Monday-to-Friday day shift. Professional growth: Opportunities to develop threat-hunting expertise, research emerging attack techniques, and contribute to cybersecurity knowledge and operational improvements. Inclusive workplace: A commitment to equal employment opportunity and a collaborative culture grounded in integrity, ownership, and customer focus.