Senior Security Analyst (MDR)

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Senior Security Analyst (MDR) based in United States. This role is an opportunity to become a founding analyst within a modern managed detection and response operation built around AI-powered security technology. You will serve as a senior security advisor, determining what threats mean, assessing their business impact, and deciding how incidents should be handled. The position spans cloud, identity, endpoint, and SaaS environments, providing broad exposure to contemporary attacker behavior and security challenges. You will combine AI-assisted investigation with hands-on telemetry and log analysis to investigate incidents with depth and precision. Beyond individual cases, you will help shape investigative standards, response workflows, reporting, and the evolution of the security platform. Your insights will directly influence detection engineering and product development, allowing lessons from individual investigations to strengthen protection across customer environments. This is a high-impact, customer-facing role for an experienced security professional who wants to operate at the intersection of expert judgment, automation, and AI-native defense. Accountabilities: - Own security investigations from initial case pickup through resolution, determining what happened, assessing impact and blast radius, assigning verdicts and severity, and documenting the reasoning behind each decision. - Conduct in-depth investigations across identity, cloud, endpoint, and SaaS telemetry, reconstructing attacker activity including initial access, lateral movement, persistence, and exfiltration.

- Combine AI-assisted investigation capabilities with hands-on log and evidence analysis, applying sound judgment to determine when automation is reliable and when deeper manual investigation is required. - Recommend and execute containment actions within customer-authorized boundaries, ensuring actions are evaluated for impact and reversibility before execution and clearly communicating recommended next steps when customer approval is required. - Prioritize investigations according to risk, meeting response targets for incidents of different severity levels and ensuring the most consequential security issues receive appropriate attention. - Act as a trusted security partner to customers by clearly explaining incidents, implications, recommended actions, and final analysis through concise and thoughtful written and verbal communication. - Conduct hypothesis-driven and AI-assisted threat hunts across customer environments, turning new findings into actionable cases, improved detections, and stronger defensive coverage. - Help define and evolve the MDR service by contributing to investigative standards, response workflows, customer reporting, analyst processes, and the tools used by the security team. - Feed investigation outcomes, analytical reasoning, and identified attack patterns back into detection engineering and product development so recurring security problems can be addressed systematically. Requirements - 4+ years of hands-on security operations experience within a SOC, MSSP, or MDR environment, ideally at a senior or Tier 3 level where you have independently owned investigation outcomes and security decisions. - Proven ability to investigate threats across identity platforms such as Okta and Entra ID, cloud environments including AWS, Azure, and GCP, endpoint detection and response systems, and SaaS platforms such as Microsoft 365 and Google Workspace. - Strong understanding of attacker tactics, techniques, and procedures, including the ability to apply the MITRE ATT&CK framework to real-world security telemetry and investigations.