Cyber Detection Analyst

HUMAN•New York, NY

8d•$70,000 - $90,000•Hybrid

About The Position

The Detection Health and Performance team helps customers maintain effective detection as attacker behavior evolves, by investigating suspicious traffic and identifying missed attacks, reducing false positives, building and evaluating detection logic and improving customers' detection health during onboarding and throughout customer's life cycle. In this role, you’ll combine data analysis, technical troubleshooting, and customer-focused communication to understand technical and detection gaps, and share helpful threat insights and recommendations. As part of the role you will work in collaboration with Technical Account Managers, Solutions Engineers, Operations, Research and Engineering teams, helping to maintaining strong security outcomes while protecting legitimate users.

Requirements

At least 2 years of experience: Technical support analyst / Security operations or Threat Analysis / Fraud and Risk analyst / business or data analyst role (or) a B.A/B.S in domains related to cybersecurity or analysis.
Experience with SQL (Best: Snowflake), BigQuery, Datadog, Tableau, or similar data and visualization tools.
Experience with Kibana (or similar experience with log analysis tools)
Experience writing an SQL query based on provided data
Experience with Jira (or similar experience with another CRM tool)
Analytical mind and statistical analysis of big data through various tools (like Kibana and SQL).
Fluent English.

Nice To Haves

Python, pandas, notebooks, or Streamlit.
Experience building dashboards or reusable investigation tools.
Familiarity with Git, APIs, JSON, and basic scripting.
Ability to use AI-assisted tools responsibly to accelerate analysis and automation
Knowledge of Web architecture: DNS / CDN / GLB, API.
Knowledge of HTTP protocol, including HTTP structure and headers
Knowledge of Cookies (where are they stored, how and why are they used)
Knowledge of Bots and threat landscape - What are bots, why do people or attackers create them, good bots vs bad bots.
Basic JS understanding and familiarity. No need to code.

Responsibilities

Investigating suspicious traffic
Identifying missed attacks
Reducing false positives
Building and evaluating detection logic
Improving customers' detection health during onboarding and throughout customer's life cycle
Combining data analysis, technical troubleshooting, and customer-focused communication to understand technical and detection gaps
Sharing helpful threat insights and recommendations
Working in collaboration with Technical Account Managers, Solutions Engineers, Operations, Research and Engineering teams
Maintaining strong security outcomes while protecting legitimate users