Sr. Threat Operations Analyst

Kaseya is the leading provider of AI-powered IT management and cybersecurity software, serving Managed Service Providers (MSPs) and internal IT organizations worldwide. Our comprehensive platform helps organizations efficiently manage, secure, and automate their IT environments, driving operational efficiency and long-term business success.

Backed by Insight Partners, a leading global software investor, Kaseya has experienced sustained double-digit growth and continues to expand its global footprint. Today, Kaseya supports customers in more than 20 countries and manages over 15 million endpoints worldwide.

Founded in 2000, Kaseya has built a culture centered around innovation, accountability, and results. We are a high-growth, high-performance organization that values individuals who are driven, adaptable, and committed to delivering exceptional outcomes for our customers and teammates alike.

At Kaseya, success comes from embracing challenges, moving with urgency, and continuously raising the bar. 

We’re hiring a Threat Detection Analyst to strengthen and scale our detection and response capabilities across Kaseya’s platforms. This role focuses on investigating security alerts, improving detection logic, and driving initiatives that enhance overall security posture. You’ll work across teams to identify threats, refine processes, and ensure effective monitoring and response to security events. Success in this role means consistently improving detection quality, reducing response time, and contributing to a more resilient security environment.

• →Investigate, triage, and respond to security alerts across multiple systems and environments
• →Monitor networks, systems, and high-value assets to detect and respond to potential threats
• →Analyze and prioritize security events based on severity, impact, and risk
• →Improve detection capabilities by refining alert logic, tuning rules, and reducing false positives
• →Document incidents, response actions, and workflows to support consistent operations
• →Partner with internal teams (Engineering, IT, Risk) to coordinate response and remediation efforts
• →Contribute to ongoing improvements in security monitoring, tooling, and processes
• →Support incident response efforts and post-incident analysis

• 3–6 years of experience in a Security Operations Center (SOC), threat detection, or cybersecurity role
• Experience investigating and responding to security alerts in a production environment
• Experience working with SIEM, EDR, or similar security monitoring tools
• Experience analyzing security events and determining severity and impact
• Experience documenting incidents and maintaining investigation records

• Experience improving detection rules, alert tuning, or reducing false positives
• Familiarity with monitoring high-value assets or critical infrastructure
• Exposure to incident response processes or threat hunting
• Understanding of networking fundamentals and common attack patterns
• Relevant certifications (e.g., Security+, GSEC, BTL1, SSCP)
• Participation in cybersecurity communities, labs, or continuous learning initiatives