Senior MDR Analyst

Blackpoint Cyber

. Analyze and evaluate anomalous network and system events in a 24x7x365 SOC environment through leadless threat hunting .

Posted 10/12/2026full-timeRemote • United StatesSenior💰 $115,000 - $140,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive experience in threat hunting and incident response within a Security Operations Center (SOC), with a strong focus on analyzing network and system events. Proficient in scripting and familiar with cloud services, contributing to operational efficiency and effective communication of technical findings.

Highest-signal resume keywords

Threat Hunting AnalysisIncident Response (IR)Windows Environment AssessmentScripting with PowerShell, Python, and GoELK Stack Familiarity

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Information SecurityEndpoint Event TriageThreat Indicator AssessmentLeadless Threat HuntingIncident Analysis Reporting

Soft Skills

Problem-SolvingCritical-ThinkingAnalytical SkillsWritten CommunicationVerbal Communication

Tools & Technologies

AWS (EC2, S3, IAM)Azure/M365ELK StackSandbox TechnologiesTest Lab Environments

Industry Keywords

Security Operations Center (SOC)Cybersecurity ThreatsAnomalous Network EventsOperational ProcessesVulnerability Analysis

Tech Stack

Tools & technologies

AWSAzureCyber SecurityEC2LinuxLogstashPythonGo

About the role

Key responsibilities & impact

Analyze and evaluate anomalous network and system events in a 24x7x365 SOC environment through leadless threat hunting
Collaborate with MDR Analysts to research and investigate emerging cybersecurity threats
Serve as an escalation point of contact for advanced intrusion analysis
Develop incident analysis reports and work across business units and customers to resolve issues
Help design and build operational processes and procedures to improve SOC efficiency
Provide actionable threat and vulnerability analysis based on security events for independent customer environments
Build test lab environments to research emerging techniques and contribute to internal and external threat-operations knowledge
Review sandbox technologies for additional IOCs uncovered from analysis artifacts
Work Monday through Friday on either 12:00 PM–8:00 PM ET or 12:00 AM–8:00 AM ET

Requirements

What you’ll need

Five (5+) years of experience in an information security role; progressive relevant training and/or certification may be substituted for one (1) year of the experience requirement
Experience working in a Security Operations Center (SOC)
Two (2+) years of experience triaging endpoint events from EDR and NGAV and supporting the Incident Response (IR) process
Deep knowledge assessing threat indicators in a Windows environment
Robust understanding of at least two of Windows, Linux, or OSX
Familiarity with ELK stack, including dashboards, Logstash configuration, and searching
Scripting/programming with PowerShell, Python, and Go
Familiarity with AWS services such as EC2, S3, and IAM, and Azure/M365
Experience developing, refining, and performing leadless threat hunting analysis
Excellent problem-solving, critical-thinking, and analytical skills
Excellent written and verbal communication skills for presenting technical findings to technical and non-technical audiences
Must be authorized to work in the United States without restriction
Bachelor’s Degree in Computer Science or related technical discipline is a bonus

Benefits

Comp & perks

Health Insurance
Vision Insurance
Dental Insurance
Life Insurance
Robust 401k plan
Discretionary Time Off
Other minor perks
Equity participation available to employees globally, with program details varying by location and employment structure
International employees receive competitive benefits in accordance with local market standards and applicable country requirements