Cyber Defense Analyst Massachusets onsite

IPolarity LLC•Hanover Township, NJ

3d•$30 - $60•Hybrid

About The Position

We are seeking a strong Senior Cyber Defense Analyst to join our team. This role will focus on the administration, optimization, and operational management of the SentinelOne EDR platform. Responsibilities include endpoint security monitoring, threat detection and response, troubleshooting security incidents, coordinating vendor support cases, and supporting cybersecurity requirements across Research, Clinical, Manufacturing, Quality, and Corporate functions. The analyst will also assist in monitoring and responding to ZeroFox alerts, performing alert triage, validation, investigation, risk assessment, documentation, and escalation activities to ensure timely mitigation of potential cybersecurity threats. This role also involves supporting cybersecurity operations for GxP-regulated systems, monitoring security events across various platforms (Microsoft 365, Azure, AWS, Active Directory, Entra ID, cloud-based applications), performing threat hunting, responding to security incidents, supporting cybersecurity requirements for validated systems, collaborating with various teams to remediate security risks, analyzing various types of cyber threats, assisting with vulnerability management, developing and maintaining incident response documentation, and supporting cybersecurity audits and compliance reviews.

Requirements

Strong Senior Cyber Defense Analyst experience.
Experience with SentinelOne EDR platform administration, optimization, and operational management.
Experience with endpoint security monitoring, threat detection, and response.
Experience troubleshooting security incidents.
Experience coordinating vendor support cases.
Experience supporting cybersecurity requirements across various business functions.
Experience monitoring and responding to alerts (e.g., ZeroFox).
Experience with alert triage, validation, investigation, risk assessment, documentation, and escalation.
Experience supporting cybersecurity operations for GxP-regulated systems.
Experience monitoring and investigating security events across Microsoft 365, Azure, AWS, Active Directory, Entra ID, and cloud-based applications.
Experience performing threat hunting activities using EDR, SIEM, threat intelligence, and cloud security tools.
Experience responding to security incidents affecting various systems (laboratory, manufacturing, research, business applications).
Experience supporting cybersecurity requirements for validated systems, electronic records, and regulated data environments.
Experience analyzing phishing attempts, BEC, malware, ransomware, insider threats, and suspicious user activities.
Experience with vulnerability management activities, including risk assessment, remediation tracking, and security exception reviews.
Experience developing and maintaining Incident Response Playbooks, SOPs, Disaster Recovery, and Cybersecurity Runbooks.
Experience supporting cybersecurity audits, vendor risk assessments, and compliance reviews.

Nice To Haves

Azure Sentinel
Cyber Threat Intelligence Services
EDR
Framework design
SentinelOne
Endpoint Protection

Responsibilities

Administer, optimize, and operationally manage the SentinelOne EDR platform.
Perform endpoint security monitoring, threat detection, and response.
Troubleshoot security incidents and coordinate vendor support cases.
Support cybersecurity requirements across Research, Clinical, Manufacturing, Quality, and Corporate functions.
Monitor and respond to ZeroFox alerts, including alert triage, validation, investigation, risk assessment, documentation, and escalation.
Support cybersecurity operations for GxP-regulated systems.
Monitor and investigate security events across Microsoft 365, Azure, AWS, Active Directory, Entra ID, and cloud-based applications.
Perform threat hunting activities using EDR, SIEM, threat intelligence, and cloud security tools.
Review and respond to security incidents affecting laboratory, manufacturing, research, and business applications.
Support cybersecurity requirements for validated systems, electronic records, and regulated data environments.
Collaborate with Infrastructure, Cloud, Manufacturing, Quality Assurance, Compliance, and Application teams to remediate security risks.
Analyze phishing attempts, business email compromise (BEC), malware, ransomware, insider threats, and suspicious user activities.
Assist with vulnerability management activities, including risk assessment, remediation tracking, and security exception reviews.
Develop and maintain Incident Response Playbooks, SOPs, Disaster Recovery, and Cybersecurity Runbooks.
Support cybersecurity audits, vendor risk assessments, and compliance reviews.