Cyber & Data Analyst XDR/NDR Detections

Why Join Us?

We’re looking for a Cyber & Data Analyst with a hacker’s curiosity and a data scientist’s precision, ready to craft high-fidelity detections and AI-powered insights. You’ll be diving into huge log datasets in Azure (ADX), designing custom detection algorithms, and experimenting with advanced statistical models and AI techniques to detect hidden patterns and anomalies. This is a hands-on, impact-driven role where cyber expertise meets big data.

Key Responsibilities

• Research, design, and deploy next-gen XDR and NDR detection rules across massive cybersecurity log datasets.
• Hunt for unknown threats by analyzing attacker TTPs, malware behaviors, and building proactive detections.
• Dive into large-scale data lakes to uncover anomalies, trends, and new detection opportunities, turning raw data into actionable algorithms.
• Collaborate with cross-functional teams to build content-driven security features that raise the bar for detection quality.
• Experiment with new AI models and advanced analytics to shape the future of cyber detection.
  
  

• 4–7 years of experience in cybersecurity analysis, advanced threat detection, or data-driven cyber research (XDR/NDR experience is a strong plus).
• Data-driven – proven expertise in data analysis and algorithm development, including applying statistical and analytical methods to massive log datasets.
• Solid grasp of AI/ML fundamentals, with real-world applications in anomaly detection, log enrichment, or behavioral modeling.
• Fluent in Azure Data Explorer (ADX) and KQL, with a track record of building complex, high-performance queries over large-scale telemetry.
• Advanced Python skills, including automation, tool development, and data pipelines.
• Deep understanding of attacker tactics (MITRE ATT&CK), modern adversary tradecraft, and network protocols (TCP/IP, DNS, HTTP).
• Hands-on experience with endpoint event analysis and data correlation techniques.
• Proven ability to take end-to-end research projects from concept to operational, production-ready detection content.