Senior Cloud Intelligence Analyst, Red Canary
$140-170k
Eligible for participation in the company's bonus program; Eligible for a grant of stock options, subject to the approval of the company's board of directors
SaaS threat detection and security operations
Job no longer available
SaaS threat detection and security operations
201-500 employees
Job no longer available
$140-170k
Eligible for participation in the company's bonus program; Eligible for a grant of stock options, subject to the approval of the company's board of directors
201-500 employees
Company mission
To make security stronger, safer, and more comprehensive.
Role
Who you are
- The role requires strong collaboration, outstanding communication, and experience in open-source threat research
- A solid understanding of cyber threat intelligence and adversary behaviors is essential, alongside proficiency in analytical and problem-solving skills
- Experience with, or a drive to research, cloud and SaaS providers, including AWS, GCP, Azure, Office 365, and Google Workspaces, and cloud attack techniques or cloud-based threat groups
- Proficiency in analytical problem-solving, quick learning of tools, and familiarity with query languages and data platforms like SQL, Splunk, Elasticsearch, Synapse Storm, or others
- Strong analytical and problem-solving skills, including the ability to synthesize complex and contradictory information
- Experience in open-source threat research, including social media, blog posts, and malware sandboxes
- Knowledge of cyber threat intelligence concepts including attribution, group naming, making assessments, and pivoting..Familiarity with the mechanics of attack behaviors and MITRE ATT&CK ®
- Experience tracking adversaries, including threat groups, activity groups, or malware families, and ability to differentiate unique and shared characteristics of clusters
- Outstanding communication skills, both written and verbal, including the ability to communicate technical concepts in a clear, succinct fashion to subject matter and non-subject matter experts alike
- Experience in Intelligence, Security Operations Center (SOC), Digital Forensics and Incident Response (DFIR), or other security-focused roles
- Curiosity and adaptability to dive into data, tackle new challenges, and thrive in a fast-paced environment
What the job involves
- Responsibilities include developing intelligence on emerging threats, producing actionable intelligence reports, defining new threat clusters, and identifying opportunities to bolster our detection and response capabilities
- Additionally, you will engage with internal teams, external partners, customers and the broader infosec community to communicate unique trends and noteworthy threat actor TTPs through blogs and presentations
- This role involves staying updated on emerging threats, suggesting workflow improvements, and supporting customers in understanding and responding to their specific threat models
- Research known and emerging threats with cloud and SaaS providers, including AWS, GCP, Azure, Office 365, and Google Workspaces
- Investigate telemetry and malicious activity to identify threats, provide context, and guide detection and response decisions. Work with Engineers and Data Scientists to ensure relevant data from Cloud and Identity telemetry sources are properly stored and indexed for historical analysis at scale
- Conduct open and closed source research to associate suspicious activity with known threats and to communicate threats of concern to our customers. Sources include social media, blog posts, intelligence reports, sandbox output, private information sharing partners, internal detections, and more
- Process and analyze patterns and trends in detections and write actionable intelligence products to track TTPs, detection coverage, and remediation strategies
- Define and analyze new activity clusters based on analysis of malicious and suspicious behaviors and activity observed across our customer base
- Produce intelligence reports and communicate actionable insights based on analysis, both internally and externally to customers and the community
- Actively engage with internal teams, external partners, customers, and the infosec community to share knowledge and enhance collaboration
- Respond to customer questions about threats to help them understand their threat model, what matters to their organization, and what actions they can take in response to various threats
- Validate Red Canary’s detection coverage against the continuously evolving threat landscape and identify unique or emerging threats to build detection coverage for
- Mentor team members and contribute to the development of intelligence analysis expertise. Suggest new methods, processes, and products that the team could adopt to help us achieve our mission and improve our workflows
Application process
- The application deadline is April 25th, 2025
- *** Colorado law requires an estimated closing date for job postings. Please don't be discouraged from applying if you see this date has passed ***
Our take
Red Canary is a leading provider of managed detection and response (MDR) services, dedicated to protecting organizations from threats across cloud workloads, identities, SaaS applications, networks and endpoints. The company offers advanced threat intelligence and 24/7 monitoring to help security teams reduce risks and respond effectively.
Recently the company introduced new features and updates to further enhance its services. The company expanded support to Amazon Web Services, Microsoft Azure, and Google Cloud Platform, and partnered with clients to modernize Security Operations Centers using Microsoft Sentinel, demonstrating Red Canary's commitment to improving security operations and maximizing existing security investments.
Red Canary's success is evident from its impressive client base and industry recognition. Protecting over 2.5M endpoints with a 99% threat accuracy and maintaining a customer satisfaction rating of around 99%. The company now plans to expand its impact to reach over 150,000 professionals through educational initiatives.
Freddie
Company Specialist at Welcome to the Jungle
Insights
-7% employee growth in 12 months
Company
Funding (last 2 of 5 rounds)
Feb 2021
$81m
SERIES C
Apr 2019
$34m
EARLY VC
Total funding: $129.9m
Company benefits
- Red Canary offers a 100% paid plan option for medical, dental and vision for you and your dependents. No waiting period
- All new hires are eligible for benefits as of their first day
- Take the time you need to recharge including vacation, sick, bereavement, jury duty, and holidays
- Red Canary offers a variety of plans to fit you and your dependent specific needs including FSA, HRA and HSA, with employer funding to offset out of pocket health care expenses
- With 60% remote workforce, Canaries can work virtually from almost anywhere in the US
- Full base pay to bond/care for your new child
Company HQ
Union Station, Denver, CO
Leadership
Brian Beyer
(CEO)Having studied at Purdue University, they worked as a Software Development Lead at Northrop Grumman and Solidyn for almost 4 years. They left Kyrus Technology in January 2014 to co-found Red Canary.
Chris Rothe
(CTO)They started their career as an IT Specialist, before spending over 3 years at Lockheed Martin as a Software Engineer and VP of Technology at Soidyn Solutions. Following 9 months at Kyrus, they co-founded Red Canary in January 2014.
Share this job
View 10 more jobs at Red Canary