Principal TDR Analyst

Role Description

The Cyber Security Principal TDR Analyst position is a subject matter expert who serves as a senior threat detection and response analyst with day-to-day focus on detection, incident response, tuning, automation, and threat hunting. The role supports a global organization with team members in North America, EMEA, and APAC regions.

This senior analyst role combines technical expertise with a background that includes:

• Mentoring team members
• Leading complex investigations
• Implementing automation
• Creating new detection capabilities
• Continuously improving their own knowledge and skillset

Additionally, having a background in systems and network engineering is ideal.

Responsibilities

• Lead investigations into complex events, determine the scope and severity of incidents, escalation needs, urgency, and gather relevant evidence
• Lead incident root cause analysis, identify attack vectors, and affected systems
• Execute incident response actions end-to-end – including rapid containment of threats, eradication of malicious artifacts, and system restoration
• Lead threat hunting operations across a global, distributed technology environment
• Proactively hunt for indicators of compromise and hidden threats in logs, network traffic, and endpoint telemetry
• Continuously tune SIEM/EDR detection rules, thresholds, and automation playbooks
• Leverage threat intelligence to enrich analysis and response
• Conduct proactive threat hunting operations to map adversary techniques, uncover stealthy threats, and close gaps in standard detection coverage
• Coordinate with cross-functional teams (IT, DevOps, Business, etc.) during high-impact incidents
• Work closely with global SOC team members and collaborate with colleagues in other regions
• Document repeatable investigation steps, findings, and actions taken for each incident type

Qualifications

• Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, or equivalent threat management & incident response experience
• Currently hold cybersecurity certifications such as GCIH, GCFA, GCIA, CEH, etc.
• 10 years of progressive experience in at least three of the following disciplines:
• Threat Detection & Analysis
• Incident Response & Management
• Threat Hunting
• Cyber Threat Intelligence
• Network Security
• Securing and monitoring operating system and cloud environments
• Function as a Level 3 SOC Analyst (analyzing and responding to cybersecurity incidents)
• Advanced understanding of emerging threats, zero-day vulnerabilities, and common attack vectors
• Hands-on experience using SIEM and EDR platforms for centralized log analysis, real-time threat monitoring, and in-depth incident investigations
• Proficient at the command line (win/*nix) and in applying scripting languages for data analysis and investigations
• Familiarity with cyber threat intelligence feeds and standards

Requirements

• Some domestic travel for project rollouts and NA IT group meetings (~10%)
• Remain in a stationary position 50% of the time
• Constantly operates a computer and other office productivity machinery
• Handle/grasp documents or office equipment
• Sit and/or stand for short or extended periods
• Work in an office environment using standard office equipment
• Talk, listen, and speak clearly on the telephone

Benefits

• Access your pay when you need it through DailyPay app
• On the spot awards offered through the Awardco Platform including gift cards and more
• Multiple options for both full and part-time employees for quality medical care
• Travel Discounts, Pet insurance, Discount Shopping & More
• Wellness Programs offered to all employees
• 401k program offered
• Opportunity for Internal Mobility and transfers available