Insider Threat Analyst
About The Position
About Kaseya Kaseya is the leading provider of AI-powered IT management and cybersecurity software, serving Managed Service Providers (MSPs) and internal IT organizations worldwide. Our comprehensive platform helps organizations efficiently manage, secure, and automate their IT environments, driving operational efficiency and long-term business success. Backed by Insight Partners, a leading global software investor, Kaseya has experienced sustained double-digit growth and continues to expand its global footprint. Today, Kaseya supports customers in more than 20 countries and manages over 15 million endpoints worldwide. Founded in 2000, Kaseya has built a culture centered around innovation, accountability, and results. We are a high-growth, high-performance organization that values individuals who are driven, adaptable, and committed to delivering exceptional outcomes for our customers and teammates alike. At Kaseya, success comes from embracing challenges, moving with urgency, and continuously raising the bar. Why Kaseya? Join a fast-growing company that’s transforming the IT industry. At Kaseya, you’ll have the opportunity to work with cutting-edge technology, collaborate with a dynamic team, and develop your career in a highimpact role. Join the Kaseya growth rocket ship and see how we are #ChangingLives! Job Summary We’re hiring a Senior CSIRT Analyst to support incident detection, investigation, and response activities across Kaseya’s environment. This role focuses on managing security incidents, improving response processes, and supporting threat detection and containment efforts across cloud and on-premise systems. You’ll work closely with Security, IT, Infrastructure, and Engineering teams to investigate threats, coordinate remediation activities, and improve overall incident response capabilities.
Requirements
- 5+ years of experience in incident response, CSIRT, SOC, or cybersecurity operations roles
- Experience investigating and responding to security incidents in a production environment
- Experience working with security tools such as SIEM, EDR, DLP, or threat detection platforms
- Experience working in cloud, on-premise, or hybrid infrastructure environments
- Experience documenting and managing incidents through ticketing or case management systems
Nice To Haves
- Experience conducting threat hunting or malware analysis activities
- Understanding of incident response frameworks and security best practices
- Experience creating dashboards, reporting, or operational security metrics
- Familiarity with vulnerability management and forensic investigation concepts
- Experience collaborating with cross-functional stakeholders including IT, Legal, and Engineering
- Relevant security certifications (e.g., Security+, GCIH, GCFA, CySA+, CISSP)
- Experience mentoring junior analysts or supporting team development
Responsibilities
- Investigate and respond to security incidents across cloud, on-premise, and hybrid environments
- Perform incident triage, containment, eradication, and recovery activities for confirmed security events
- Conduct threat hunting and analysis to identify suspicious or malicious activity
- Monitor and analyze alerts generated from SIEM, EDR, DLP, and related security platforms
- Coordinate with internal stakeholders to support remediation and incident communication efforts
- Document incidents, response actions, and findings in accordance with operational procedures
- Develop and maintain dashboards, reporting, and operational metrics related to incident response activities
- Participate in on-call rotations to support incident response outside standard business hours
- Mentor junior analysts and contribute to improvements in incident response processes and tooling
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
Education Level
No Education Listed
