Cyber Threat Analyst

Title: Cyber Threat Analyst

Location: Plano, TX

Rate: $50/Hr

Note: This position is a contract on W2, and is NOT open to C2C.

Role Summary

We are seeking a Cyber Threat Analyst to support a global Security Operations team by detecting, analyzing, and responding to cybersecurity threats across enterprise environments. This role is responsible for monitoring security alerts, performing incident triage, investigating suspicious activity, and transforming raw security telemetry into actionable intelligence. The ideal candidate is analytical, detail-oriented, and passionate about identifying the root cause behind security events while continuously improving detection capabilities.

Key Responsibilities

• Monitor security alerts and events across SIEM, EDR, and cloud security platforms to identify suspicious or anomalous activity.
• Perform initial triage and in-depth investigations to determine the severity, scope, and impact of security events.
• Correlate data from network, endpoint, identity, and cloud environments to validate incidents and identify root causes.
• Escalate confirmed security incidents to Incident Response teams with clear documentation and supporting evidence.
• Support threat intelligence initiatives by validating threat feeds and tagging Indicators of Compromise (IOCs).
• Collaborate with Detection Engineering teams to improve detection rules, dashboards, and correlation logic.
• Document investigation findings, incident timelines, and recommended containment actions within the case management system.
• Participate in shift handoffs, threat reviews, and knowledge-sharing sessions.
• Recommend process improvements to increase detection accuracy and reduce false positives.

Required Skills

• Strong understanding of cybersecurity principles, network protocols, and threat actor tactics.
• Experience with SIEM platforms such as Splunk, Microsoft Sentinel, or IBM QRadar.
• Experience with Endpoint Detection & Response (EDR) tools such as Microsoft Defender, CrowdStrike, or Carbon Black.
• Familiarity with the MITRE ATT&CK Framework and Cyber Kill Chain methodology.
• Ability to analyze logs and security telemetry to identify potential compromises.
• Experience with one or more scripting or query languages such as KQL, Python, PowerShell, or SQL is preferred.
• Excellent analytical, troubleshooting, and problem-solving skills.
• Strong written and verbal communication skills.
• Ability to work effectively within a 24x7 global security operations environment.

Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or a related field.
• 2–4 years of experience in Security Operations, Threat Analysis, Cyber Defense, or Digital Forensics.
• Industry certifications such as CompTIA Security , GSEC, GCIH, or equivalent are preferred.
• Experience with AWS, Azure, or Google Cloud Platform is a plus.