Security Analyst - Tier 3

Tier 3 Security Analyst7AI's AI agents take on a lot of the SOC's non-human work, but scaling that trust requires senior analysts who can validate the hardest cases and mentor the team doing it. As a Tier 3 Security Analyst, you'll be the technical lead and escalation point for junior analysts reviewing 7AI Agent investigations. You'll validate the agents' work, prove out the threats they stopped, and hunt for malicious activity across customer environments. You'll also help build the processes that let this team scale without losing quality.What You'll Do:Analyze and validate investigations completed by the AI Agents for accuracy and completeness, evaluating riskLead and mentor junior analysts and serve as the technical expert and key escalation point for investigationsCorrelate data from various data sources including cloud, endpoint, identity, network, etc. to understand that full picture of a malicious activityInvestigate malicious activity that the 7AI Agents responded to and understand the complexity of the attack that was stopped including the risk that was prevented for customersUse our advanced AI Agents to hunt in customer environments to detect and remediate emerging threats, ultimately contributing to detections that will be folded back into the productAssist customers with ongoing threat monitoring, triage, and prioritization of security alerts as needed but especially during incidents to resolve threats and secure the environmentProactively identify potential threats and anomalies in customer environments by reviewing logs and malicious findingsUtilize your supreme communication skills to engage with customers who vary in their level of technical depth and focus (from SOC analysts to CISOs)Architect processes while we build out this elite organization to scale the operation sustainably while maintaining consistent qualityCollaborate with the Sales, Engineering, and Product teams, providing feedback on the customer experience and assist in optimizing and tuning the AI platformStay current with emerging cybersecurity trends, vulnerabilities, and new attack techniques, especially the field of AI-driven attacksWhat We're Looking For:5+ years of experience in cyber security operationsHands-on experience with investigating alerts and across multiple sources (endpoint, network, identity, email, cloud, etc.)Strong understanding of security monitoring tools (XDR, SIEM, IDS/IPS, IDP, etc.)Familiarity with log telemetry conceptsExperience analyzing and investigating security alerts from multiple sources, including intrusion detection systems, network monitoring tools, and endpoint protection platformsStrong knowledge of common attack techniques and frameworks (MITRE ATT&CK) and incident triage methodologiesStrong analytical and problem-solving skills, with the ability to verify AI-driven analysis and make independent security decisionsData querying experience with SIEM querying technologies (SPL, KQL, FQL, SQL, etc) and familiarity with log / telemetry conceptsStrong knowledge with Malware Analysis methodsGreat interpersonal skills with a service oriented mindsetProven track record of successfully collaborating in a team, including mentorship skills and ability to teach complex conceptsNice to Have:Prior experience in a Managed Services environmentIncident Handling experienceRelevant certifications: Security+, GSEC, GCIH