Based in Austin with remote work flexibility, this senior cybersecurity role sits on Home Depot's Threat Detection & Response team within the Security Operations Center. The analyst leads advanced monitoring, investigation, and incident response while mentoring junior staff and shaping playbooks and automation to strengthen defenses.
Location
Austin, TX (remote)
Compensation
USD 100,000 - 160,000 per year
Overview
The Senior Cybersecurity Analyst on the Threat Detection & Response (TDR) team is accountable for sophisticated security monitoring, detection, investigation, and incident response. The role includes mentoring junior analysts, leading multiple projects, and contributing to the development of playbooks and automation workflows.
Responsibilities
- Be the front-line responder by identifying, triaging, and remediating security detections and anomalies
- Provide incident response support, leading Threat Detection and Response analysts during technical investigations, effectively communicating results, analytical analysis, and mitigations to different operational teams and management
- Analyze and interpret complex and high-volume data from various sources to advance investigations, quantify trends, or support analytical findings
- Evaluate the type and severity of security events leveraging in-depth knowledge of exploits and vulnerabilities
- Leverage technology (commercial and open source) to enrich, triage, and characterize internal insights on malware and Indicators of Compromise (IOCs)
- Provide recommendations for improvements and optimizations for security tools based on experience and analytical insight
- Collaborate with technical and business teams to drive TDR and SOC initiatives
- Lead the development of new investigative techniques and automation workflows
- Create and review playbooks for efficiency and proactively improving playbooks where necessary
- Stay informed about information security trends and technologies in the technology industry and identify best practices and methodologies
- Work with and train junior analysts on THD technologies, alert lifecycle, and investigative best practices
- Participate in threat detection and incident response activities including threat hunting, detection creation, endpoint analysis, end-user interviews, and timeline construction
- Help implement improvement measures to enhance alerting and detection practices
- Refine and develop dashboards, queries, and reports to continuously improve security situational awareness
- Participate in the evaluation, deployment, integration, and configuration of new networking and security solutions
- Lead in the investigation of security events and incidents in collaboration with the SOC team
- Search and analyze security logs for malicious and abnormal network behaviors
- Ability to analyze data and communicate malicious behavior discoveries to non-technical consumers
Key Responsibilities
- 50% Analysis: Synthesize data to develop a solution, communicate the solution, and present it to teams and stakeholders
- 20% Collaborate: Partner cross-functionally to identify trends and resolve issues
- 20% Drive Execution: Implement solutions to meet customer expectations and ensure project goals are met in a timely manner
- 10% Support and Enable: Mentor junior level analysts
Requirements
- Minimum of 5 years of relevant cybersecurity experience
- Bachelor's degree or equivalent degree in a related field
- 18 years of age or older
- Legally permitted to work in the United States
- Core competencies: Action Oriented, Collaborates, Communicates Effectively, Customer Focus, Drives Results
Certifications
- Security+, Network+
- CySA+, CEH, OSCP
- GIAC certifications such as GSEC, GMON, GCIH
- Cloud Security Certifications from public providers (GCP, Azure, AWS)
Reporting
This position typically reports to a Manager or Senior Manager and has 0 direct reports.
Travel
Typically requires overnight travel less than 10% of the time.
Physical Requirements
Most of the time is spent sitting in a comfortable position with frequent opportunities to move. On rare occasions there may be a need to move or lift light articles.
Working Conditions
Located in a comfortable indoor area. Any unpleasant conditions would be infrequent and not objectionable.
