About the job
Detection & Response Analyst II
About Us
At Todyl, we are dedicated to safeguarding small and medium-sized enterprises against the ever-evolving landscape of cyber threats. Our innovative platform seamlessly integrates threat management, risk assessment, and compliance solutions, delivering exceptional and cost-effective cybersecurity services to Managed Service Providers (MSPs) and their clients.
Our mission is to ensure the safety of our partners and customers, empowering them to navigate risks and adhere to regulatory standards. A successful protection strategy relies on a collaborative team that shares trust and commitment to our objectives.
About the Role
We are seeking a motivated Detection & Response Analyst II to enhance our Managed Extended Detection and Response (MXDR) team. In this pivotal role, you will play a crucial part in fortifying our partners’ cybersecurity postures, protecting their systems and data. This position presents an exciting opportunity to collaborate with peers, utilize state-of-the-art security tools, and expand your knowledge in security operations and threat intelligence.
This position reports to the Director of MXDR and is available at our Augusta, GA or Denver, CO offices. The role encompasses evening (4 PM – 2 AM EST) or overnight (12 AM – 10 AM) shifts.
Key Responsibilities
Monitoring & Reporting: Continuously monitor security alerts and generate technical reports that detail alert activities and their root causes for our partners.
Collaborative Work: Collaborate closely with team members to share insights, learn, and jointly tackle projects and incidents.
Automation & Tool Development: Take initiative in contributing to internal projects and documentation, while developing new capabilities to automate security operations and improve overall security.
Threat Hunting & Analysis: Engage in proactive threat-hunting activities, analyze indicators of compromise (IOCs), and investigate malware threat families to foresee and mitigate potential risks.
Incident Response: Aid in triaging and investigating security incidents, collaborating with Detection Response Account Managers (DRAMS) or Threat Hunters to determine the root cause, scope, and impact of incidents, ensuring smooth transitions for containment and recovery efforts.
Qualifications
A strong interest in cybersecurity, with a foundational understanding of security operations and incident response. Relevant certifications (such as CompTIA Security+, CEH, etc.) are a plus. Excellent analytical and problem-solving skills, along with a collaborative mindset.