Security Analyst (Threat & Exposure Management)

Infotree Global Solutions • Capon Bridge, WV

5d

About The Position

The Security Analyst will join a high-impact Security & Compliance team at a global biopharmaceutical innovator. Working alongside Senior Security Analysts and global security leadership, the analyst will investigate threats, analyze attack paths, support occasional red team and penetration testing exercises, and advance exposure management across a modern enterprise infrastructure. The role focuses on protecting critical infrastructure and research systems through threat telemetry analysis, investigative work, and collaboration across global operations.

Requirements

• At least 3 years of experience in Threat Intelligence, Threat Hunting, or Incident Response within enterprise environments.
• Hands-on experience with EDR platforms and SIEM/log analytics tools.
• Solid understanding of vulnerability exploitation, exposure management, and attack path analysis.
• Deep understanding of modern intrusion techniques, attacker tradecraft, and telemetry correlation.
• Strong critical-thinking skills under pressure, high autonomy, and effective communication skills to explain complex technical findings to non-technical stakeholders.
• Bachelor’s degree in Cybersecurity or Computer Science, or equivalent practical experience.

Nice To Haves

• GIAC certifications such as GCIA, GCIH, GCED, GCIR, GNFA, or GCFA.
• Offensive or red team certifications such as OSCP, OSCE, CRTO, or CRTP.
• DFIR credentials such as CFCE, EnCE, or related specialized credentials.

Responsibilities

• Execute hypothesis-driven threat hunts across endpoint, identity, cloud, and network telemetry to uncover sophisticated adversary activity.
• Collaborate with senior leadership and cross-functional teams, including SOC, Privacy, Legal, and IT, during high-priority security events.
• Use the Threat & Exposure Management framework to identify misconfigurations, analyze attack paths, prioritize vulnerabilities, and route them for remediation.
• Analyze attacker tactics and techniques using the MITRE ATT&CK framework and live threat intelligence.
• Support occasional red team and penetration testing exercises to validate defenses and identify chained weaknesses.
• Translate threat intelligence and hunt findings into detection logic, response playbooks, and executive documentation.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level