Sr Analyst I-Cyber Defense

Job Summary

The Cyber Defense - Senior Analyst is a senior individual contributor responsible for strengthening the organization's ability to detect and validate cyber threats through SIEM detection engineering, proactive threat hunting, purple teaming, and adversary emulation. The role owns the end-to-end lifecycle of detection content-from requirements and design through testing, deployment, tuning, measurement, and retirement-and uses the MITRE ATTCK framework to align detections, hunts, and validation activities with relevant adversary behaviors. The Senior Analyst works closely with Security Operations, Incident Response, Threat Intelligence, and other technology and security teams to identify visibility and detection gaps, validate control effectiveness using CALDERA, VECTR, and other breach-and-attack simulation tools, and translate findings into measurable improvements. The role also provides technical guidance and mentoring while remaining primarily hands-on.

Responsibilities

• Conduct hypothesis-driven and intelligence-led threat hunts across large and diverse data sets; document methodologies, evidence, findings, and recommended follow-up actions.
• Map detections, hunts, observed behaviors, and validation results to MITRE ATTCK tactics, techniques, and sub-techniques to assess and communicate coverage and gaps.
• Plan and execute purple-team exercises and collaborative adversary-emulation activities with defensive teams and authorized testing stakeholders.
• Use MITRE CALDERA, VECTR, and other breach-and-attack simulation tools to safely emulate relevant adversary behaviors, track test scenarios, record defensive outcomes, and validate detection and response controls.
• Expertise in design, development, testing, deployment, tuning, and lifecycle management of high-fidelity SIEM detections across endpoint, identity, network, cloud, application, and other relevant telemetry sources.

Experience and Qualifications

• 9-11 years of relevant experience in cybersecurity, security operations, detection engineering, threat hunting, incident response, security analytics, or related disciplines; experience in a financial-services or similarly regulated environment is preferred.
• Practical experience using MITRE CALDERA, VECTR, and other breach-and-attack simulation or adversary-emulation tools for test execution, collaboration, evidence capture, and remediation tracking.
• Strong understanding of attacker tradecraft, common intrusion patterns, malware behaviors, identity-based attacks, lateral movement, persistence, command and control, and data-access techniques.
• Demonstrated hands-on expertise in SIEM detection engineering, including analytics design, query development, testing, tuning, content deployment, versioning, documentation, and lifecycle governance.

Job Details

• Full time
• Employee
• Job Exempt: Yes

Skills

• SIEM detection engineering
• Threat hunting
• Adversary emulation
• Mitre attck
• CALDERA
• VECTR
• breach-and-attack simulation tools
• analytics design
• query development

Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.