Information Security Risk Analyst

What you'll do

• Develop, test, tune, and maintain SIEM detection rules, log correlation searches, alerts, and dashboards.
• Translate threat intelligence and adversary tactics into actionable security detections.
• Build analytics to identify malicious behavior, compromised accounts, and lateral movement.
• Utilize AI-driven analytics, UEBA, and behavioral baselining to detect anomalies across endpoints, networks, and clouds.
• Map detection content to the MITRE ATT&CK framework to identify coverage gaps.
• Support Incident Response by analyzing logs during active investigations and creating new detections from lessons learned.
• Identify and recommend improvements for logging, telemetry, and overall security monitoring visibility.
• Document detection logic, data sources, and response guidance for all security alerts.

What we're looking for

• Experience in security operations, threat hunting, incident response, or detection tuning.
• Proficiency in SIEM rule development and writing queries using KQL, SPL, or SQL.
• Knowledge of MITRE ATT&CK tactics and techniques to map detection coverage.
• Experience with behavioral analytics, UEBA, anomaly detection, or AI-assisted threat detection.
• Familiarity with Microsoft Defender XDR, Sentinel, Entra ID, or similar security platforms.
• Ability to analyze logs from identity systems, endpoints, firewalls, proxies, and cloud platforms.
• Scripting or automation experience using Python, PowerShell, or Logic Apps.
• Relevant certifications such as GCIH, GCIA, GCDA, GMON, GCTI, GCFA, Security+, CySA+, CISSP, or equivalent experience.