Principal TDR Analyst

🕒 vor 2 Monaten

🤠 Texas – Remote

🤠 Texas – Remote

⏰ Vollzeit

🔴 Experte

🧐 Analyst

👻 Geisterscore 22%

Was es bedeutet: wie wahrscheinlich diese Stelle offen bleibt, ohne dass aktiv eingestellt wird.So liest du es: 60 % oder höher heißt, wir halten das für einen Geisterjob. Niedrigere Werte sind weniger bedenklich.Wie wir werten: Dauer offen, Neuveröffentlichungen, offene Stellen vs Teamgröße, wie schnell Stellen geschlossen werden, und ob ein Gehalt angegeben ist.Hinweis: eine Schätzung aus öffentlichen Daten, kein Urteil über das Unternehmen. Echte Stellen können hoch punkten, nutze es also als Hinweis, nicht als Fakt.

Jetzt Bewerben

Ähnliche Remote-Jobs finden

E-Mail-Benachrichtigung für neue Jobs einrichten

📊 Überprüfen Sie Ihre Lebenslauf-Bewertung für diese Stelle

Verbessern Sie Ihre Chancen auf ein Vorstellungsgespräch, indem Sie Ihre Lebenslauf-Bewertung vor der Bewerbung überprüfen.

Lebenslauf hochladen

Worldwide Flight Services (WFS)

WebsiteLinkedInAlle Stellen

10.000+ Mitarbeiter

Gegründet 1984

💼 Beratung

✈️ Reisen

🚗 Transport

Consulting • Travel • Transport

Worldwide Flight Services (WFS) ist ein weltweit führender Anbieter von Luftfrachtlogistik und ein erstklassiger Bodenabfertigungspartner. Als Mitglied der SATS Group bietet WFS eine breite Palette von Dienstleistungen an, darunter Luftfrachtabfertigung, Bodenabfertigung, LKW-Transporte sowie spezialisierte Express- und E-Commerce-Lösungen. Mit einer starken Präsenz an über 215 Standorten legt WFS besonderen Wert auf Sicherheit und operative Exzellenz.

Beschreibung

• Lead investigations into complex events, determine the scope and severity of incidents, escalation needs, urgency, and gather relevant evidence • Lead incident root cause analysis, identify attack vectors, and affected systems • Execute incident response actions end-to-end – including rapid containment of threats, eradication of malicious artifacts, and system restoration • Lead threat hunting operations across a global, distributed technology environment • Proactively hunt for indicators of compromise and hidden threats in logs, network traffic, and endpoint telemetry • Continuously tune SIEM/EDR detection rules, thresholds, and automation playbooks—automating repetitive response actions • Leverage threat intelligence to enrich analysis and response • Stay up to date on new vulnerabilities and adversary tactics adjusting monitoring rules and detection strategies • Conduct proactive threat hunting operations to map adversary techniques, uncover stealthy threats, and close gaps in standard detection coverage coordinate with cross-functional teams (IT, DevOps, Business, etc.) during high-impact incidents and translating complex technical findings into clear, actionable insights for non-technical stakeholders • Work closely with global SOC team members and collaborate with colleagues in other regions (e.g. joint investigations or hand-offs) to ensure seamless coverage and knowledge sharing • Document repeatable investigation steps, findings, and actions taken for each incident type in a clear and concise manner • Prepare incident reports and contribute to post-incident review meetings, highlighting what occurred, how it was resolved, and recommendations to prevent future occurrences

🎯 Anforderungen

• Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, or equivalent threat management & incident response experience • Currently hold cybersecurity certifications such as GCIH, GCFA, GCIA, CEH, etc • 10 years of progressive experience in at least three of the following disciplines: Threat Detection & Analysis, Incident Response & Management, Threat Hunting, Cyber Threat Intelligence, Network Security, Securing and monitoring operating system and cloud environments • Function as a Level 3 SOC Analyst (analyzing and responding to cybersecurity incidents) • Advanced understanding of emerging threats, zero-day vulnerabilities, and common attack vectors (phishing, malware, ransomware, lateral movement) with the ability to ensure rapid detection and response • Hands-on experience using SIEM and EDR platforms for centralized log analysis, real-time threat monitoring, and in-depth incident investigations • Be proficient at the command line (win/*nix) and in applying scripting languages for data analysis and investigations • Familiarity with cyber threat intelligence feeds and standards, incorporating indicators and threat intel into monitoring operations to enrich context and anticipate emerging threat.

🏖️ Vorteile

• Access your pay when you need it through DailyPay app! • On the spot awards offered through the Awardco Platform including gift cards and more! • Multiple options for both full and part-time employees! • Travel Discounts, Pet insurance, Discount Shopping & More! • Wellness Programs offered to all employees! • 401k program offered! • Opportunity for Internal Mobility and transfers available!