Cyber Defense Analyst

Job not on LinkedIn

November 8

Apply Now

Receive Emails with Similar Jobs

Abnormal Security

WebsiteLinkedInAll Job Openings

Abnormal provides total protection against the widest range of attacks including phishing, malware, ransomware, social engineering, executive impersonation, supply chain compromise, internal account compromise, spam, and graymail.

501 - 1000 employees

📋 Description

• Monitor alerts from tools like SIEM, EDR, IAM, CSPM, CDR etc. • Perform initial triage, enrichment, and correlation across multiple data sources. • Identify false positives and fine-tune rules with detection engineering. • Lead containment, eradication, and recovery for endpoint, cloud, and identity incidents. • Document and communicate incidents through SOAR/Jira/ServiceNow workflows. • Perform root cause analysis and propose permanent preventive controls. • Proactively hunt using hypotheses mapped to MITRE ATT&CK. • Investigate anomalies across CloudTrail, Okta, GitHub, and other telemetry sources. • Collaborate with threat intelligence to identify emerging TTPs. • Build or enhance playbooks in SOAR (Torq or equivalent). • Create custom enrichment scripts and automations (Python, Bash, etc.). • Suggest new detection logic and operational improvements. • Track and report operational metrics (MTTD, MTTR, incident categories). • Maintain documentation and lessons learned.

🎯 Requirements

• 3–5 years of hands-on SOC or Incident Response experience in a cloud-first or hybrid environment. • Strong understanding of attacker lifecycle, MITRE ATT&CK, and threat actor TTPs. • Experience with EDR (CrowdStrike preferred), SIEM (Splunk preferred), and SOAR (Torq, XSOAR, or Phantom). • Familiarity with AWS, Okta, and SaaS platforms. • Proficiency in writing queries and automations using Python, SPL, or equivalent. • Excellent analytical and investigative skills — capable of operating independently with minimal hand-holding. • Strong documentation and communication skills for technical and executive audiences.

🏖️ Benefits

• Bonus eligibility • Restricted stock units (RSUs) • Health insurance • Paid time off