Note: The job is a remote job and is open to candidates in USA. Rapid7 is hiring a Security Operations Analyst II to strengthen its security posture and customer confidence in its products and services. The role investigates security alerts, conducts threat hunting and incident response analysis, documents findings, and improves threat detection in collaboration with product teams.

Responsibilities

• Lead and drive investigations spanning evidence collection, analysis, intrusion vector determination, and malicious activity identification
• Create detailed Incident Reports documenting technical analysis, findings, and recommended remediation steps
• Conduct rotational threat hunting activities to proactively uncover unknown threats
• Assist in Incident Response engagements by analyzing forensic artifacts to track threat actor movements
• Provide high-quality threat detection services to secure the organization
• Research current attack methodologies to enhance threat detection capabilities
• Offer continuous technical feedback to Rapid7 product development teams

Skills

• Bring strong problem-solving ability, critical thinking skills, and technical ingenuity to drive efficient incident investigations
• Demonstrate required familiarity with Windows, macOS, and Linux operating systems
• Apply essential hands-on experience using SIEM tools, such as the Rapid7 command platform or Splunk
• Leverage experience in core Security Operations Center functions, including incident response, threat hunting, and forensic investigations
• Identify areas for process improvement and successfully execute sustainable solutions
• Execute decision-making by making efficient choices during investigations that resolve security challenges and enable momentum
• Demonstrate accountability by taking full ownership of incident analyses, findings, and remediation tracking
• Drive cross-functional collaboration by partnering across security teams and product developers to elevate security capabilities

Company Overview

Company H1B Sponsorship