Cyber Defense Analyst Massachusets onsite

IPolarity•Whippany, NJ

3d•Hybrid

About The Position

We are seeking a strong Senior Cyber Defense Analyst to join our team. This role focuses on the administration, optimization, and operational management of the SentinelOne EDR platform. You will be responsible for endpoint security monitoring, threat detection and response, troubleshooting security incidents, and coordinating with vendors. This position supports cybersecurity requirements across Research, Clinical, Manufacturing, Quality, and Corporate functions. Additionally, you will assist in monitoring and responding to ZeroFox alerts, performing alert triage, validation, investigation, risk assessment, documentation, and escalation to ensure timely mitigation of potential cybersecurity threats. This role also involves supporting cybersecurity operations for GxP-regulated systems, monitoring security events across various cloud platforms and applications, performing threat hunting, and responding to security incidents affecting critical systems. You will collaborate with multiple teams to remediate security risks, analyze various types of cyber threats, and assist with vulnerability management. Developing and maintaining Incident Response Playbooks, SOPs, Disaster Recovery, and Cybersecurity Runbooks is also a key responsibility. The role will also support cybersecurity audits, vendor risk assessments, and compliance reviews.

Requirements

Strong Senior Cyber Defense Analyst experience.
Experience in the administration, optimization, and operational management of the SentinelOne EDR platform.
Experience with endpoint security monitoring, threat detection and response.
Experience troubleshooting security incidents.
Experience coordinating vendor support cases.
Experience supporting cybersecurity requirements across Research, Clinical, Manufacturing, Quality, and Corporate functions.
Experience monitoring and responding to ZeroFox alerts.
Experience performing alert triage, validation, investigation, risk assessment, documentation, and escalation.
Experience supporting cybersecurity operations for GxP-regulated systems.
Experience monitoring and investigating security events across Microsoft 365, Azure, AWS, Active Directory, Entra ID, and cloud-based applications.
Experience performing threat hunting activities using EDR, SIEM, threat intelligence, and cloud security tools.
Experience reviewing and responding to security incidents affecting laboratory systems, manufacturing systems, research environments, and business applications.
Experience supporting cybersecurity requirements for validated systems, electronic records, and regulated data environments.
Experience collaborating with Infrastructure, Cloud, Manufacturing, Quality Assurance, Compliance, and Application teams to remediate security risks.
Experience analyzing phishing attempts, business email compromise (BEC), malware, ransomware, insider threats, and suspicious user activities.
Experience assisting with vulnerability management activities, including risk assessment, remediation tracking, and security exception reviews.
Experience developing and maintaining Incident Response Playbooks, SOPs, Disaster Recovery, and Cybersecurity Runbooks.
Experience supporting cybersecurity audits, vendor risk assessments, and compliance reviews.
Azure Sentinel
Cyber Threat Intelligence Services
EDR
Framework design
SentinelOne
Endpoint Protection

Responsibilities

Administration, optimization, and operational management of the SentinelOne EDR platform.
Endpoint security monitoring, threat detection and response.
Troubleshooting security incidents and coordinating vendor support cases.
Supporting cybersecurity requirements across Research, Clinical, Manufacturing, Quality, and Corporate functions.
Monitoring and responding to ZeroFox alerts, including alert triage, validation, investigation, risk assessment, documentation, and escalation.
Supporting cybersecurity operations for GxP-regulated systems.
Monitoring and investigating security events across Microsoft 365, Azure, AWS, Active Directory, Entra ID, and cloud-based applications.
Performing threat hunting activities using EDR, SIEM, threat intelligence, and cloud security tools.
Reviewing and responding to security incidents affecting laboratory systems, manufacturing systems, research environments, and business applications.
Supporting cybersecurity requirements for validated systems, electronic records, and regulated data environments.
Collaborating with Infrastructure, Cloud, Manufacturing, Quality Assurance, Compliance, and Application teams to remediate security risks.
Analyzing phishing attempts, business email compromise (BEC), malware, ransomware, insider threats, and suspicious user activities.
Assisting with vulnerability management activities, including risk assessment, remediation tracking, and security exception reviews.
Developing and maintaining Incident Response Playbooks, SOPs, Disaster Recovery, and Cybersecurity Runbooks.
Supporting cybersecurity audits, vendor risk assessments, and compliance reviews.