Threat Detection Analyst

Summary

Company Overview Alchemy Security is a rapidly expanding Information Security solutions provider, specializing in Information Security intelligence technology and services. We combine extensive experience with innovative ideas to holistically solve our customer's most challenging Information Security problems.Overview Job Objective Ensure operational excellence in services delivery while supporting team capability growth and driving forward progress on organizational maturation initiatives.Job Responsibilities: Security Monitoring and Incident Response: Perform analysis of security alerts, ensuring timely identification, escalation of potential threats, and tailored recommendations for remediation efforts to address and mitigate the impact of security incidentsParticipate in and lead threat-hunting activities to proactively identify and mitigate vulnerabilities or malicious activity.Stay updated on emerging cybersecurity threats and trends to implement proactive security measures.Support incident response efforts, including containment activities to reduce risk and serving as an incident handler and incident analyst.Collaborate with cross-functional teams to contribute to the development and optimization of threat detection rules, playbooks, investigation dashboards, and alert/tuning workflows.Leverage offensive security insights to inform and strengthen defensive strategies, ensuring a proactive approach to identifying vulnerabilities and mitigating potential threats.Accountable to commitments both internal (OKRs/KPIs) and external (client requests) with the ability to prioritize efficientlyCollaborate on operational projects, such as maintain documentation for process and procedures on Confluence.Perform on-point duties by serving as the primary contact for assigned responsibilities, ensuring accurate execution, timely resolution, and adherence to established procedures.Adoption and usage of AI tools to enhance workflow efficiency while performing SOC tasks, while maintaining critical thinking and independent analysis.Tier-2 Client Engagement: Serve as a point of escalation for cases, providing advanced analysis and recommendations for resolution.Support client communication, helping to clarify findings, recommend actions, and ensure satisfaction.Develop detailed threat reports to better inform clients about their threat landscape, including types of threats, motivations, and mitigation strategies.Enhance threat detection capabilities by contributing to log gap analysis, alert correlation tracking, and remediation activities.Conduct quality assurance activities, ensuring that triaging, investigations, and reporting meet high standards.Continuous maintenance of Client Information RepositoriesRequired Skills and Qualifications: Proven experience in SOC operations, including incident analysis, threat hunting, incident response, and process improvement.Knowledge of cybersecurity threats, attack vectors, and mitigation strategies.Strong understanding of security tools such as SIEM, intrusion detection systems, and endpoint protection platforms.Excellent analytical and problem-solving skills for handling complex investigations.Ability to mentor team members and assist in operational oversight.Strong documentation, reporting, and communication skills for both technical and non-technical audiences.Proficiency in developing and refining operational workflows, metrics tracking, and threat reporting.Ability to support primarily 2nd shift with off-shift coverage, as required.The position requires participation in two on‑site team sessions per year.This position is remote, however, employment for this role is limited to residents in the following states: CO, CT, MA, ME, MI, MN, MT, NV, SD, TX, WIMust have an unrestricted and indefinite work authorization to work in the U.S.Education An advanced degree in Computer Science, Information Technology, or a related academic discipline is preferred, and 3 - 5 years relevant work experienceA certificate in a related discipline such as IT Security, Networking, System Administration, and/or Programing/Scripting are preferred, but not requiredJob Type: Full-timePay: From $65,000.00 per yearBenefits: 401(k)401(k) matchingDental insuranceEmployee assistance programFlexible spending accountHealth insuranceHealth savings accountLife insurancePaid time offParental leaveRetirement planVision insuranceApplication Question(s): Do you have an unrestricted and indefinite authorization to work in the United States?Do you have an advanced degree as stated in the job description?At this time employment for this role in limited to the following states: CO, CT, MA, ME, MI, MN, MT, NV, SD, TX, WI. Do you reside in the one of these states?Do you have experience in a Security Operation Center capacity as an Intrusion Analyst?Work Location: Remote#J-18808-Ljbffr

Job Description

Company Overview Alchemy Security is a rapidly expanding Information Security solutions provider, specializing in Information Security intelligence technology and services. We combine extensive experience with innovative ideas to holistically solve our customer's most challenging Information Security problems.Overview Job Objective Ensure operational excellence in services delivery while supporting team capability growth and driving forward progress on organizational maturation initiatives.Job Responsibilities: Security Monitoring and Incident Response: Perform analysis of security alerts, ensuring timely identification, escalation of potential threats, and tailored recommendations for remediation efforts to address and mitigate the impact of security incidentsParticipate in and lead threat-hunting activities to proactively identify and mitigate vulnerabilities or malicious activity.Stay updated on emerging cybersecurity threats and trends to implement proactive security measures.Support incident response efforts, including containment activities to reduce risk and serving as an incident handler and incident analyst.Collaborate with cross-functional teams to contribute to the development and optimization of threat detection rules, playbooks, investigation dashboards, and alert/tuning workflows.Leverage offensive security insights to inform and strengthen defensive strategies, ensuring a proactive approach to identifying vulnerabilities and mitigating potential threats.Accountable to commitments both internal (OKRs/KPIs) and external (client requests) with the ability to prioritize efficientlyCollaborate on operational projects, such as maintain documentation for process and procedures on Confluence.Perform on-point duties by serving as the primary contact for assigned responsibilities, ensuring accurate execution, timely resolution, and adherence to established procedures.Adoption and usage of AI tools to enhance workflow efficiency while performing SOC tasks, while maintaining critical thinking and independent analysis.Tier-2 Client Engagement: Serve as a point of escalation for cases, providing advanced analysis and recommendations for resolution.Support client communication, helping to clarify findings, recommend actions, and ensure satisfaction.Develop detailed threat reports to better inform clients about their threat landscape, including types of threats, motivations, and mitigation strategies.Enhance threat detection capabilities by contributing to log gap analysis, alert correlation tracking, and remediation activities.Conduct quality assurance activities, ensuring that triaging, investigations, and reporting meet high standards.Continuous maintenance of Client Information RepositoriesRequired Skills and Qualifications: Proven experience in SOC operations, including incident analysis, threat hunting, incident response, and process improvement.Knowledge of cybersecurity threats, attack vectors, and mitigation strategies.Strong understanding of security tools such as SIEM, intrusion detection systems, and endpoint protection platforms.Excellent analytical and problem-solving skills for handling complex investigations.Ability to mentor team members and assist in operational oversight.Strong documentation, reporting, and communication skills for both technical and non-technical audiences.Proficiency in developing and refining operational workflows, metrics tracking, and threat reporting.Ability to support primarily 2nd shift with off-shift coverage, as required.The position requires participation in two on‑site team sessions per year.This position is remote, however, employment for this role is limited to residents in the following states: CO, CT, MA, ME, MI, MN, MT, NV, SD, TX, WIMust have an unrestricted and indefinite work authorization to work in the U.S.Education An advanced degree in Computer Science, Information Technology, or a related academic discipline is preferred, and 3 - 5 years relevant work experienceA certificate in a related discipline such as IT Security, Networking, System Administration, and/or Programing/Scripting are preferred, but not requiredJob Type: Full-timePay: From $65,000.00 per yearBenefits: 401(k)401(k) matchingDental insuranceEmployee assistance programFlexible spending accountHealth insuranceHealth savings accountLife insurancePaid time offParental leaveRetirement planVision insuranceApplication Question(s): Do you have an unrestricted and indefinite authorization to work in the United States?Do you have an advanced degree as stated in the job description?At this time employment for this role in limited to the following states: CO, CT, MA, ME, MI, MN, MT, NV, SD, TX, WI. Do you reside in the one of these states?Do you have experience in a Security Operation Center capacity as an Intrusion Analyst?Work Location: Remote#J-18808-Ljbffr