Senior Tactical Response Analyst (42)

Summary

Leading complex investigations into active adversary incidents, the full-time Senior Tactical Response Analyst will manage high-stakes cases, build evidence-based narratives, and provide actionable remediation guidance while working remotely.Key responsibilities:Lead investigations involving confirmed active adversaries and serious intrusions across various telemetry sourcesBuild clear, evidence-based timelines and narratives to guide partners through remediation and recoveryDevelop technical notes and feedback for product improvements and create repeatable playbooks and automation opportunitiesRequired qualifications:3-5+ years of experience in SOC, MDR, threat hunting, digital forensics, or incident responseDemonstrated ability to investigate complex intrusions with minimal oversightStrong understanding of attacker tactics, techniques, and procedures, including initial access and lateral movementExperience with endpoint and forensic tools such as EDR platforms and osqueryProficiency in query languages like KQL, EQL, or equivalent

Job Description

Leading complex investigations into active adversary incidents, the full-time Senior Tactical Response Analyst will manage high-stakes cases, build evidence-based narratives, and provide actionable remediation guidance while working remotely.Key responsibilities:Lead investigations involving confirmed active adversaries and serious intrusions across various telemetry sourcesBuild clear, evidence-based timelines and narratives to guide partners through remediation and recoveryDevelop technical notes and feedback for product improvements and create repeatable playbooks and automation opportunitiesRequired qualifications:3-5+ years of experience in SOC, MDR, threat hunting, digital forensics, or incident responseDemonstrated ability to investigate complex intrusions with minimal oversightStrong understanding of attacker tactics, techniques, and procedures, including initial access and lateral movementExperience with endpoint and forensic tools such as EDR platforms and osqueryProficiency in query languages like KQL, EQL, or equivalent