Cyber Detection & Response Analyst

The Cyber Detection and Response Analyst supports day-to-day detection, investigation, and response activities as part of a Cyber Detection and Response Team (DART). This is a hands-on technical role focused on identifying, analyzing, and responding to cyber threats across the client’s environment, working closely with Security Engineering and broader security stakeholders. This role will be a part of a 24/7 team and cover one of two shifts: Sunday-Thursday 9:00 am-5:00 pm PT or Tuesday-Saturday 9:00 am-5:00 pm PT Monitor, triage, and investigate security alerts and events across endpoint, network, cloud, and identity systems. Support incident response activities including analysis, containment, remediation, and documentation. Execute established incident response playbooks and contribute to their continuous improvement. Perform threat hunting activities to identify potential compromises and gaps in detection coverage. Leverage threat intelligence to inform investigations and detection tuning. Collaborate with Security Engineering to tune detection logic and improve security controls. Produce clear, concise incident reports and support root cause analysis and remediation efforts. Support escalation processes as part of a 24/7 detection and response capability.