Senior Security Analyst (MDR)

This role is an opportunity to become a founding analyst within a modern managed detection and response operation built around AI-powered security technology.
You will serve as a senior security advisor, determining what threats mean, assessing their business impact, and deciding how incidents should be handled.
The position spans cloud, identity, endpoint, and SaaS environments, providing broad exposure to contemporary attacker behavior and security challenges.
You will combine AI-assisted investigation with hands-on telemetry and log analysis to investigate incidents with depth and precision.
Beyond individual cases, you will help shape investigative standards, response workflows, reporting, and the evolution of the security platform.
Your insights will directly influence detection engineering and product development, allowing lessons from individual investigations to strengthen protection across customer environments.
This is a high-impact, customer-facing role for an experienced security professional who wants to operate at the intersection of expert judgment, automation, and AI-native defense.

• 4+ years of hands-on security operations experience within a SOC, MSSP, or MDR environment, ideally at a senior or Tier 3 level where you have independently owned investigation outcomes and security decisions.
• Proven ability to investigate threats across identity platforms such as Okta and Entra ID, cloud environments including AWS, Azure, and GCP, endpoint detection and response systems, and SaaS platforms such as Microsoft 365 and Google Workspace.
• Strong understanding of attacker tactics, techniques, and procedures, including the ability to apply the MITRE ATT&CK framework to real-world security telemetry and investigations.
• A rigorous, evidence-driven approach to analysis, with the ability to distinguish suspicious activity from confirmed threats and identify the evidence required to confidently reach a conclusion.
• Hands-on experience with AI-assisted security investigation or automation, together with the judgment to understand its strengths, limitations, and appropriate areas of human oversight.
• Strong customer-facing communication skills and experience guiding stakeholders through active security incidents, explaining what is happening, why it matters, and what should happen next.
• Excellent written communication skills, with the ability to produce clear, accurate, customer-ready investigation summaries and recommendations.
• A high standard for analytical quality, accountability, and professional judgment, with a willingness to have the quality of your work measured against clear expectations.
• Ability to work within defined shifts as analyst coverage expands to a 24/7 operating model.
• Experience in a multi-tenant MDR or MSSP environment is an advantage, particularly where you have supported multiple customer environments simultaneously.
• Experience writing or tuning detection rules using technologies such as Sigma, YARA-L, SPL, KQL, or similar is highly valued.
• Incident command experience, including customer-facing executive briefings, as well as dedicated threat hunting or DFIR experience, is a plus.
• Experience using AI or agentic coding tools to develop internal security tooling and improve analyst workflows is an additional advantage.