Cyber Defense Analyst

Responsibilities include endpoint security monitoring, threat detection and response, troubleshooting security incidents, coordinating vendor support cases, and supporting cybersecurity requirements across Research, Clinical, Manufacturing, Quality, and Corporate functions. The resource will also assist in monitoring and responding to ZeroFox alerts, performing alert triage, validation, investigation, risk assessment, documentation, and escalation activities to ensure timely mitigation of potential cybersecurity threats.

Our client, a IT Services and Consulting company, is looking for a Cyber Defense Analyst for their Cambridge, MA/Hybrid location.
 
Responsibilities:

• Strong Senior Cyber Defense Analyst in the administration, optimization, and operational management of the SentinelOne EDR platform.
• Responsibilities include endpoint security monitoring, threat detection and response, troubleshooting security incidents, coordinating vendor support cases, and supporting cybersecurity requirements across Research, Clinical, Manufacturing, Quality, and Corporate functions.
• The resource will also assist in monitoring and responding to ZeroFox alerts, performing alert triage, validation, investigation, risk assessment, documentation, and escalation activities to ensure timely mitigation of potential cybersecurity threats.
• Support cybersecurity operations for GxP-regulated systems supporting Clinical, Quality, Manufacturing, and Laboratory environments.
• Monitor and investigate security events across Microsoft 365, Azure, AWS, Active Directory, Entra ID, and cloud-based applications.
• Perform threat hunting activities using EDR, SIEM, threat intelligence, and cloud security tools.
• Review and respond to security incidents affecting laboratory systems, manufacturing systems, research environments, and business applications.
• Support cybersecurity requirements for validated systems, electronic records, and regulated data environments.
• Collaborate with Infrastructure, Cloud, Manufacturing, Quality Assurance, Compliance, and Application teams to remediate security risks.
• Analyze phishing attempts, business email compromise (BEC), malware, ransomware, insider threats, and suspicious user activities.
• Assist with vulnerability management activities, including risk assessment, remediation tracking, and security exception reviews.
• Develop and maintain Incident Response Playbooks, SOPs, Disaster Recovery, and Cybersecurity Runbooks.
• Support cybersecurity audits, vendor risk assessments, and compliance reviews.

 
Requirements:

• Years of Experience: 14.00 Years of Experience
• Top Skills Required :
• Azure Sentinel,
• Cyber Threat Intell. Services,
• EDR, Framework design,
• SentinelOne
• Endpoint Protec.

 
Why Should You Apply?

• Health Benefits
• Referral Program
• Excellent growth and advancement opportunities