There are still lots of open positions. Let's find the one that's right for you.
Rapid7’s Tactical Operations team (TACOPS) is responsible for handling the most time-critical tasks for all customers, such as the investigation and triage of high priority security alerts using our cloud hosted SIEM, InsightIDR. This team is composed of Managed Detection & Response Analysts who work on the following shift schedules (there is no night shift for U.S. analysts at Rapid7!). Rapid7 offers a flexible work environment; Associate Analysts are required to work in our SOC two days per week, one of which is typically Wednesday. Shift A: Sunday-Wednesday from 10am-8pm ET Shift B: Wednesday-Saturday from 10am-8pm ET. Most days for Associate Analysts will consist of reviewing alert data to identify evil activity in customer environments. In these roles you will be empowered to steer investigations. Investigations include everything from evidence acquisition and analysis to figure out how the intrusion began to identify any malicious or unexpected activity related to the event. Based on this investigation you will be responsible for writing an incident report which includes your technical analysts, documented findings and remediation recommendations for customers. Your customer advisor colleagues will be largely responsible for direct communication with the customer. You will have fellow analysts who will be ready to help you if you encounter a problem or have a question, including Mid, Senior and Lead Analysts. In the event of a security incident that rises to the level of a Remote Incident Response engagement, Associate Analysts may be tasked with performing investigation tasks related to the investigation. In this circumstance you will focus on helping a team track threat actor actions across an environment by examining forensic artifacts.