Principal SOC Detection and Response Analyst, Cybereason
Incident Response and Hunting
Cybersecurity platform
Job no longer available
Cybersecurity platform
501-1000 employees
Job no longer available
501-1000 employees
Company mission
To empower enterprises, organizations, and businesses to run their operations with full security confidence.
Role
Who you are
- This role is to be filled by experienced cybersecurity analysts who have a specialization in Malware Analysis, Threat Research and Threat Hunting
What the job involves
- Tier 3 is the driving force for Threat Hunting, Security Research and operationalizing Threat Intelligence in the Cybereason Global Security Operations Centre
- Their role is primarily focused on escalations, auditing, deep analysis, research, continued education of junior analysts, and proactive hunting
- Tier 3 are responsible for defining effective and operationalized Hunting strategy and working with Tier 1 and Tier 2 analysts to implement it
- Developing operational strategy for the delivery of the Managed Security Service (Managed Detection and response), training and aligning the T1, T2 analysts
- Develop scoped hunting queries to detect malicious behaviour in the Cybereason Defence Platform based on emerging threat intelligence
- Analysis of unknown malicious samples with the development of mitigation steps and product configurations
- Ability to collect, process, and exploit OSINT to facilitate the creation of better hunting queries and contribute the creation of Threat Alerts
- Proactively hunt in Cybereason environments looking for new and emerging threats
- Observe and analyse emerging threats and security trends seen in open source and the Cybereason customer environment
- Accurately classify threat actors, utilizing MITRE ATT&CK and/or Diamond Model and using Threat Intelligence
- Forecast risk and threats based on OSINT and other analysis methods
- Shifts include Monday-Friday, and normal shift hours as defined by the SOC Manager; Additionally, Tier 3 personnel may be requested 'on call' during 'off-days' in case of escalations and critical incidents
Our take
Cybereason is a cybersecurity endpoint detection and response platform that identifies cyber attacks. The defense platform leverages antivirus, detection and response technology with pre-emptive threat hunting to make clients future-ready against cyber attacks.
While there are a number of companies operating in this space, Cybereason has a strong track record, having helped protect customers such as Motorola, Mitsubishi and Harrods from supply-chain attacks as well as a series of high-profile ransomware attacks like those launched by DarkSide, REvil and Conti groups.
Despite a strong customer base and attracting a high level of investment, Cybereason hasn't been immune to macroeconomic conditions which have affected the overall tech sector, and it carried out a large scale restructuring near the end of 2022. After receiving Series G funding in 2023, Cyberason is expanding its customer base in the US midmarket segment and optimizing its product until market conditions turn around.
Kirsty
Company Specialist at Welcome to the Jungle
Insights
-31% employee growth in 12 months
Company
Funding (last 2 of 9 rounds)
Mar 2025
$120m
LATE VC
Apr 2023
$100m
SERIES G
Total funding: $933.6m
Company benefits
- Unlimited PTO
- Health, Dental & Vision
- Snacks + Beverages (in office)
- Employee Assistance Program
- Fitness Reimbursement
- Pension/401k
Company HQ
Prudential / St. Botolph, Boston, MA
Leadership
Yossi Naar
(Chief Visionary Officer)They worked as a Software Developer for 10 months before spending a combined 6 years at Gita Technologies and Kenshoo. They co-founded Cybereason in 2012.
Share this job