Detect Analyst

BreakPoint Labs is seeking a Detect Analyst to assume a critical role in bolstering network defense capabilities through the development, testing, and implementation of advanced detection measures across diverse data sources. This position necessitates researching emerging threats, constructing detection analytics, and executing forensic analysis and threat hunting to identify and mitigate malicious activity. The ideal candidate is a technically proficient and analytical
professional possessing a comprehensive understanding of enterprise environments and a commitment to continuous improvement in cybersecurity operations.

Responsibilities include:
- Use network and host-based data to drive detection, monitoring, and response capabilities.
- Create detection analytics based on the MITRE ATT&CK Framework and other security frameworks.
- Perform research on adversarial Tools, Techniques, and Procedures (TTPs).
- Assist incident response (IR) teams by analyzing host behavior and network traffic.
- Collaborate with technical teams to develop and improve detection and response capabilities.
- Conduct forensic analysis and proactive threat hunting as required.
- Work independently and collaboratively while maintaining attention to detail under pressure.

Required Experience:
- Bachelor’s degree in relevant technical field with 3+ years of experience, or at least 5 years of experience performing incident response, forensics, malware analysis, or penetration testing.
- Must have DoD 8570 IAT Level III and CSSP-specific certifications.
- Requires strong written and verbal communication skills.
- In depth understanding of common enterprise technologies.
- Ability to convey highly technical concepts to audiences with varying technical understanding.
- Position may require up to 10% travel, as needed.
-Prefer proficiency in at least three of the following disciplines:
– Network traffic analysis and host-based log analysis
– Comprehensive understanding of enterprise Windows security (Active Directory)
– Static and Dynamic malware analysis
– Disk and Memory forensics
– Practical knowledge in at least one scripting or development language (e.g., PowerShell or Python).

Prefer working familiarity with at least two of the following products:
– Splunk and/or Elastic
– Sentinel / Microsoft MDE
– Fidelis Network

Certifications Required: IAT Level III and CND certification
Security Clearance Required: Secret
Education Level Required: Bachelor’s Degree Area(s) of Study Bachelor’s degree in relevant technical field with 3+ years of experience, or at least 5 years of experience performing incident response, forensics, malware analysis, or penetration testing.