Source Job

US

  • Handle escalations from level I Threat Analysts and train new team members in a 24/7 SOC environment.
  • Conduct security log monitoring, event detection, and response using endpoint and network security tools.
  • Research threat intelligence, create MDR reports, and interact with clients to neutralize cyber threats.

SOC Endpoint Security Network Security Incident Response Threat Hunting

20 jobs similar to MDR Threat Analyst

Jobs ranked by similarity.

  • Handle escalations from Level I analysts and guide on investigation handling.
  • On-board new threat analysts and participate in process improvement.
  • Conduct detection and response to security events and maintain security metrics.

Sophos is a global cybersecurity company specializing in managed detection and response services. With a remote-first culture and a global team, the company values diversity and collaboration.

  • Investigate and analyze logs and security-related events via Sophos tooling
  • Identify and respond to cyber threats occurring within customer environments
  • Communicate and document findings to various customer audiences including technical and executive teams

Sophos is a cybersecurity company that delivers best-in-class monitoring, detection, and response services. It is a remote-first company with a focus on teamwork and continuous improvement.

  • Maintain oversight of threat analysts and manage daily Security Operations Center activities.
  • Lead incident response and investigation to determine root cause and resolution.
  • Apply expertise in network intrusion analysis, digital forensics, and malware handling to protect customers.

Sophos provides cybersecurity solutions including Managed Detection and Response (MDR) services. It is a global, remote-first company with thousands of employees, fostering a collaborative and inclusive culture.

$115,000–$128,000/yr
US Unlimited PTO

  • Lead advanced threat investigations and independent threat hunting across diverse customer environments.
  • Act as an escalation point for complex incident analysis and collaborate with SOC analysts on emerging threats.
  • Develop detection capabilities, refine hunting methods, and deliver clear incident reports to strengthen defenses.

They are a cybersecurity partner specializing in managed detection and response services. The organization fosters a high-performance, collaborative culture grounded in integrity, ownership, and customer focus.

Global

  • Lead investigative execution of active cyber incidents for MDR customers and MSPs.
  • Work directly with customers to investigate, contain, and support remediation.
  • Mentor incident response analysts and provide technical guidance.

Sophos is a leading cybersecurity company focused on protecting organizations from cyber threats. As a remote-first company, they emphasize collaboration across global teams and are committed to diversity and inclusion.

$70,000–$75,000/yr
US

  • Perform triage and advanced analysis across endpoint, server, and network infrastructure.
  • Conduct threat hunting and proactive investigations to detect malicious activities.
  • Document recommendations and maintain knowledge of the threat landscape.

Cyderes builds identity and access management, exposure management, and managed detection and response programs to stop active threats. The company is Great Place to Work certified and supported by a tireless global team.

  • Lead investigative stream of active cyber incidents, performing advanced forensic analysis and containment tasks.
  • Utilize Sophos technologies to investigate, contain, and respond to cyber incidents across diverse customer environments.
  • Maintain detailed documentation and provide clear communication to MDR customers during incidents.

Sophos is a cybersecurity company that provides Managed Detection and Response (MDR) services. It is a remote-first company committed to fostering a diverse and inclusive workplace.

$71,500–$91,000/yr
Australia 12w maternity 12w paternity

  • Triage, investigate, and remediate Active Hands-On Keyboard intrusions using endpoint telemetry, logs, and forensic artifacts.
  • Support sales, collaborate with Product to shape the MDR service, and contribute to Incident Response, Threat Hunting, and Detection Engineering.
  • Share findings through blogs, conference talks, and research publications to build your personal brand and the security community.

Huntress provides enterprise-grade cybersecurity to businesses of all sizes through a human-led Security Operations Center. Founded in 2015 by former NSA operators, the remote-first team secures over 6 million endpoints and 16 million identities worldwide, fostering a collaborative and inclusive culture.

$80,000–$128,000/yr
US

  • Monitor and investigate security alerts, perform threat hunting, and report suspected incidents.
  • Analyze network traffic and log files to identify anomalous activity and potential threats.
  • Use SIEM and EDR tools, build Splunk queries, and mentor junior SOC team members.

Peraton is a global national security company providing mission capability integration and IT solutions to government agencies and the U.S. armed forces. Its employees tackle the most daunting challenges to keep people around the world safe and secure.

US Unlimited PTO

  • Conduct hypothesis-driven threat hunts across endpoints, networks, and cloud telemetry to identify threats evading detection.
  • Analyze logs and alerts for IOCs and adversary TTPs, then deliver findings and detection recommendations to stakeholders.
  • Partner with blue teams during purple team engagements to tune and validate detection controls against red team activity.

SIXGEN delivers agile, mission-ready cybersecurity solutions for government and critical infrastructure organizations. We combine deep expertise with innovative technical capabilities, fostering a diverse and inclusive culture with flexible remote work.

$70,000–$80,000/yr
US 3w PTO

  • Lead analysis, containment, and remediation of complex security threats across a multi-tenant client base.
  • Serve as the primary escalation point for Tier I analysts and own critical incidents.
  • Mentor junior staff and drive improvements to playbooks, workflows, and DFIR capabilities.

Sentinel Blue is a young company bringing enterprise-class cybersecurity to small and medium-sized businesses. The environment is fast-paced and dynamic, with a focus on continuous learning and innovation.

$60,000–$70,000/yr
US Unlimited PTO

  • Triage MDR alerts and analyze security events in a 24x7 SOC environment.
  • Approve escalations, create playbooks, and verify protection actions.
  • Communicate with clients on high-severity incidents and act as an SME.

Critical Start is a cybersecurity company providing 24x7 AI-driven detection and response across IT and OT. The team is collaborative, high-trust, and casual, with a focus on innovation.

$120,000–$140,000/yr
US 4w PTO

  • Monitor and triage security alerts across identity, endpoint, email, network, cloud, and application technologies.
  • Investigate phishing, account compromise, malware, ransomware, and other security events while coordinating incident response.
  • Conduct threat intelligence, threat hunting, vulnerability management, and forensic evidence collection to protect company assets.

Trupanion is a leading provider of medical insurance for cats and dogs in North America. They offer a collaborative, casual, and pet-friendly environment where everyone is encouraged to be themselves.

$200,000–$210,000/yr
US

  • Lead the end-to-end incident response lifecycle as the primary internal escalation point from the SOC.
  • Drive strategic preparedness through tabletops, purple teaming, and telemetry optimization to reduce noise and increase detection efficacy.
  • Collaborate with engineering and offensive security teams, owning post-incident reviews to harden defenses and improve response capabilities.

Huntress is a remote-first cybersecurity company founded by former NSA operators in 2015, providing enterprise-grade protection to all businesses. It secures over 6 million endpoints and 16 million identities, backed by a 24/7 human-led SOC and an inclusive culture.

$4,000–$5,333/mo
Europe

  • Investigate and respond to security alerts and incidents.
  • Operate SIEM, endpoint protection, and threat detection tools.
  • Support vulnerability management and security assessments.

LEONI is a global leading provider of products, solutions and services for energy and data management in the automotive industry. With about 95,000 employees in 23 countries and part of Luxshare Group, we shape the future of mobility.

$63,500–$76,200/yr
UK

  • Monitor and triage security alerts across identity, endpoint, email, network, cloud, application, and data-protection technologies.
  • Investigate phishing, account compromise, malware, ransomware, unauthorized access, data exposure, insider threat, and third-party events.
  • Conduct threat intelligence, threat hunting, and vulnerability management to prioritize and remediate risks.

Trupanion is a leading provider of medical insurance for cats and dogs in North America. We offer a collaborative, casual, and pet-friendly environment where everyone is encouraged to be themselves.

$10,000–$13,000/yr
India

  • Investigate, contain, and remediate cybersecurity incidents across customer environments.
  • Conduct digital forensics, malware analysis, and threat intelligence to identify attacker techniques.
  • Collaborate with security operations and threat hunting teams to improve detection and response.

A cybersecurity company that provides incident response and digital forensics services to customers facing security threats. The team works remotely in a 24/7 security operations environment with a focus on collaboration and continuous improvement.

$10,000–$13,000/yr
India

  • Investigate security alerts and support live incident response engagements.
  • Analyze suspicious software to identify malicious behavior and classify malware.
  • Conduct threat hunting and digital forensics to strengthen customer protection.

This company provides security operations services to protect organizations worldwide from cyber threats. It fosters a collaborative SOC environment where analysts gain hands-on experience with real-world security incidents.

Australia

  • Lead and develop high-performing MDR teams during APJ hours, ensuring quality security operations and customer outcomes.
  • Drive continuous improvement through operational data, automation, and cross-team collaboration.
  • Manage escalations, maintain operational health, and build leadership capability within the team.

Sophos is a cybersecurity company providing managed detection and response services. It is a remote-first organization that promotes collaboration across locations and time zones.

Slovakia

  • Develop use cases and detection rules while assisting in the conception and design of detection strategies.
  • Collaborate with the SOC for use case validation and acceptance, and refine existing detection rules.
  • Create dashboards and reports for customers or the internal SOC, and contribute to internal knowledge sharing.

Deutsche Telekom IT Solutions Slovakia provides innovative information and communication technology services and is a key driver of digitalization for medium-sized companies. With over 3,900 employees, we foster a culture of work-life balance and continuous transformation.