Senior Security Monitoring Analyst – Leadership Pathway (m/f/n)

We are looking for a motivated and curious individual to join our Threat Defense R&D team as a Security Monitoring Analyst.

In this role, you’ll help shape and evolve security services and technologies, especially in the areas of threat hunting, incident response and EDR/XDR detection capabilities. You’ll work with cutting-edge tools and collaborate with some of the best minds in the field.

As our team continues to grow, this role may evolve to include leadership responsibilities, offering the opportunity to mentor and guide other Security Monitoring Analysts. Please note that while leadership opportunities may arise, they are not guaranteed.

Functional Responsibilities and Duties

• Monitor and analyze global security threats and identify relevant events requiring attention.
• Formulate hypotheses and conduct threat hunting activities across assigned environments or on a global scale.
• Investigate security incidents, map attack paths and identify root causes.
• Participate in global incident response cases (e.g. MDR customers, research-related cases).
• Communicate findings and recommendations to internal teams and customers.
• Contribute to the enhancement of methodologies, processes and infrastructure supporting the delivery of security services.
• Prepare guidance and methodologies for MDR teams.
• Participate in research of real-world attack techniques and help design detection logic for global EDR/XDR platforms.
• Collaborate with Threat Research and Malware Analysis teams.
• Continuously learn and share knowledge with the team.
• Perform conceptual, systemic, creative and methodological activities.
• Carry out other tasks according to the instructions of the direct manager in accordance with the activities of the department and the company.

Experience & Knowledge

• Experience with EDR/XDR and/or SIEM platforms.
• Background in threat hunting and incident response.
• Experience as a SOC security analyst (or in a similar role outside of a SOC) where the primary responsibility involved operating and evaluating outputs from security monitoring systems to identify and report potential threats is a strong advantage.
• Familiarity with forensic analysis, penetration testing or red teaming is an advantage.
• Solid understanding of the inner workings of Windows and Linux operating systems (processes, registry, file systems, services, etc.).
• Good understanding of networking technologies and principles (IP, ports, protocols, etc.).