Security Analyst (Cyber Defense Analyst)

About the role

This position contributes to the successful delivery of AHEAD’s information security program in order to assure AHEAD stakeholders of strong operating controls and effective defensive capabilities. The Cyber Defense Analyst is responsible for monitoring, triaging, investigating, and reporting on security events across the enterprise, with a strong emphasis on CrowdStrike Falcon, CrowdStrike NG-SIEM, detection engineering, and response automation.

What you'll do

• Responsible for monitoring, triaging, investigating, and reporting on security events across the enterprise, with a strong emphasis on CrowdStrike Falcon
• Create, tune, and maintain NG-SIEM searches, dashboards, alerts, parsers, and detections; improve alert fidelity, reduce false positives, add meaningful context
• Design and implement automation for alert enrichment, investigation support, ticket creation and updates, evidence collection, reporting, notification
• Measure and communicate automation outcomes, including reduced manual effort, faster triage or response, improved consistency, increased coverage
• Conduct proactive threat hunting and threat research across CrowdStrike, NG-SIEM, Microsoft 365, identity, cloud

What you need

• 5–9 years in cybersecurity
• SIEM
• Incident response
• Vulnerability assessment
• EDR
• Python
• PowerShell
• Any graduate

Good to have

• Learning and development
• Office 365
• Root cause analysis