Cyber Defense Analyst (Remote - US) at Jobgether

, , United States -

Full Time

Start Date

Immediate

Expiry Date

08 Feb, 26

Salary

170000.0

Posted On

10 Nov, 25

Experience

2 year(s) or above

Remote Job

Yes

Telecommute

Yes

Sponsor Visa

Skills

Cybersecurity, Incident Response, Threat Hunting, Automation, SIEM, EDR, Cloud Security, Python, Bash, Analytical Skills, Problem-Solving, Communication Skills, MITRE ATT&CK, Root Cause Analysis, Documentation, Collaboration

Industry

Internet Marketplace Platforms

Description

This position is posted by Jobgether on behalf of a partner company. We are currently looking for a Cyber Defense Analyst in the United States. This role offers the opportunity to work in a dynamic, fast-paced environment protecting hybrid cloud and on-premise systems from cybersecurity threats. As a Cyber Defense Analyst, you will monitor, investigate, and respond to security alerts across multiple layers including cloud, endpoint, identity, and applications. You will work closely with detection engineers, cloud security, and IT teams to enhance threat detection and response capabilities. The ideal candidate is highly analytical, proactive, and capable of automating repetitive tasks while taking full ownership of incidents end-to-end. This role emphasizes critical thinking, collaboration, and continuous improvement to maintain a secure operational environment. You will have the chance to develop detection logic, create automation scripts, and contribute to process improvements across the SOC. Your work will directly impact organizational security posture and operational efficiency. Accountabilities: Monitor and triage alerts from SIEM, EDR, IAM, CSPM, and other security tools. Lead incident response for endpoint, cloud, and identity security events, including containment, eradication, recovery, and documentation. Perform root cause analysis and recommend preventive measures to improve security posture. Conduct proactive threat hunting using MITRE ATT&CK and other frameworks. Collaborate with threat intelligence and engineering teams to identify emerging threats and fine-tune detection rules. Develop and enhance playbooks, automation scripts, and operational processes to improve SOC efficiency. Maintain accurate documentation, track operational metrics, and report on security incidents and response performance. 3–5 years of hands-on experience in SOC operations or incident response within cloud-first or hybrid environments. Strong understanding of attacker lifecycle, MITRE ATT&CK framework, and threat actor TTPs. Experience with EDR (CrowdStrike preferred), SIEM (Splunk preferred), and SOAR platforms (Torq, XSOAR, or Phantom). Familiarity with AWS, Okta, and other SaaS platforms. Proficiency in Python, SPL, Bash, or other scripting languages for automations. Excellent analytical, investigative, and problem-solving skills with minimal supervision. Strong communication skills to effectively document and present findings to both technical and executive audiences. Knowledge of containers, Kubernetes security, CSPM/CDR/VM tools, or relevant cybersecurity certifications (CEH, Security+, GCIH, GCIA, AWS Security Specialty) is a plus. Competitive base salary range: $144,500—$170,000 USD. Eligibility for performance bonuses and equity (RSUs). Comprehensive medical, dental, and vision coverage. Opportunities for professional development and training. Remote work flexibility and supportive work environment. Access to cutting-edge security tools and technologies. Career growth in cybersecurity operations, threat detection, and automation. Jobgether is a Talent Matching Platform that partners with companies worldwide to efficiently connect top talent with the right opportunities through AI-driven job matching. When you apply, your profile goes through our AI-powered screening process designed to identify top talent efficiently and fairly. 🔍 Our AI evaluates your CV and LinkedIn profile thoroughly, analyzing your skills, experience, and achievements. 📊 It compares your profile to the job’s core requirements and past success factors to determine your match score. 🎯 Based on this analysis, we automatically shortlist the 3 candidates with the highest match to the role. 🧠 When necessary, our human team may perform an additional manual review to ensure no strong profile is missed. The process is transparent, skills-based, and free of bias — focusing solely on your fit for the role. Once the shortlist is completed, we share it directly with the company that owns the job opening. The final decision and next steps (such as interviews or additional assessments) are then made by their internal hiring team. Thank you for your interest! #LI-CL1

Responsibilities

Monitor and respond to security alerts across multiple layers including cloud, endpoint, identity, and applications. Collaborate with various teams to enhance threat detection and response capabilities.