Principal Cyber Analyst

Darktrace•Los Angeles, CA

About The Position

Darktrace is a global leader in AI for cybersecurity, founded in 2013, protecting nearly 10,000 organizations from unknown threats using its proprietary AI. The Darktrace Active AI Security Platform™ delivers a proactive approach to cyber resilience across the entire digital estate. With over 200 patent applications filed and supported by over 2,400 employees worldwide, Darktrace is seeking an experienced and highly capable Principal Cyber Analyst. This role is for a senior individual contributor who excels in complex threat investigations, high-impact customer engagements, and solving challenging cybersecurity problems. As a Principal Cyber Analyst, you will operate as a top-tier subject-matter expert, serving as a senior escalation point for advanced security cases, shaping analytical standards, and influencing teams across the organization. You will work hands-on with sophisticated threats, engage directly with customers at technical and executive levels, and help drive continuous improvement across detection and investigation capabilities. This position offers significant technical influence, customer exposure, and the opportunity to shape how complex threats are investigated and resolved at scale, with no direct people management responsibilities.

Requirements

Extensive experience in cybersecurity, incident response, SOC operations, or threat intelligence.
Deep knowledge of modern attack techniques, network security, and detection methodologies.
Strong analytical and critical-thinking skills with the ability to operate under ambiguity.
Excellent communication skills, capable of engaging both technical and non-technical audiences.
A proactive, ownership-driven approach to complex problem-solving.

Nice To Haves

Experience with Darktrace or comparable advanced security platforms is a strong advantage.

Responsibilities

Lead expert-level investigations into advanced threats, campaigns, and anomalous activity.
Act as a senior escalation point for complex, high-priority customer security incidents.
Deliver clear, high-quality written and verbal incident reporting to high-visibility customers.
Conduct advanced customer consultations, architecture discussions, and post-incident reviews.
Partner with Product, Engineering, and Threat Intelligence teams to improve workflows and detections.
Mentor analysts through technical guidance, best practices, and knowledge sharing.
Contribute to analysis frameworks, documentation, and training content.