Managed Detection and Response Analyst

• Investigate incoming EDR/XDR incidents, focusing on accurate triage and severity assessment
• Execute remediation actions such as workload isolation according to established playbooks
• Document investigation steps and maintain complete case records
• Collaborate with AI engineering to test and refine automated triage and response processes
• Own incidents from detection through resolution, with senior staff assistance when required
• Support development and refinement of documentation, automation, and incident correlation logic
• Communicate with customers via email and phone about incident status and recommendations
• Stay informed about current security threats and attacker techniques
• Work a 5-day/8-hour schedule during office hours with rotational weekend coverage

• Experience in SOC, MDR, or IT security operations
• Strong understanding of EDR/XDR operations and security incident workflows
• Strong understanding of common attackers' TTPs and MITRE ATT&CK framework
• Knowledge of Windows OS, Active Directory, Linux, and networking
• Familiarity with log analysis in tools like Kibana or manual reviews
• Experience with security tools such as EDR, SIEM, and SOAR
• Interest in automation technologies
• Ability to follow structured processes and accurately document findings
• Growth mindset
• Strong communication skills and attention to detail
• Solid English written and verbal communication skills at B2 or higher
• Resume and application must be submitted in English
• Successful completion of applicable criminal, education, and identity background checks

• Opportunities to contribute to proactive threat hunting and advanced incident response
• Growth-oriented role with opportunities to contribute across multiple areas
• Equal opportunity employment
• Applicable criminal, education and identity background checks as part of employment offer process