Cyber Threat Analyst - (Remote/WFH)

About Cellebrite:
Cellebrite (Nasdaq: CLBT) is on a mission to protect and save lives, accelerate justice, and preserve privacy in communities around the globe. As a world leader in Digital Intelligence solutions, we empower public and private sector organizations to manage the complexities of legally sanctioned digital investigations. Trusted by thousands of leading agencies and companies worldwide, our innovative platform transforms how investigative digital data is collected, reviewed, analyzed, and managed.

We are expanding our Threat Operations team and seeking a Cyber Threat Analyst to strengthen our first line of defense. This role is pivotal in investigating and responding to security incidents, optimizing alert systems, and implementing automation and security integrations to safeguard our organization and clients.

Key Responsibilities: Security Event Response: Monitor and respond to security incidents, document findings, and manage events to ensure swift resolution.

SIEM Management:
Continuously monitor and fine-tune SIEM alerts to improve detection and response rules. Develop new rules based on emerging cyber-attack trends and business threat strategies.

Threat Hunting:
Proactively identify and investigate potential threats through advanced hunting techniques.

Vulnerability Management:
Generate detailed vulnerability reports and collaborate with stakeholders to drive remediation progress.

Security Policy Evaluation:
Create reports for IT administrators, business managers, and security leaders to assess and enhance the effectiveness of security policies. Recommend and implement changes to bolster defenses.

Documentation & Audits:
Maintain comprehensive incident documentation to support incident response and disaster recovery plans. Conduct internal and external security audits as needed.

Automation:
Automate security processes for efficiency and accuracy.

Qualifications: Experience:

At least 5 years of hands-on experience as a Tier 2 Cyber Threat Analyst.
Proven expertise with SIEM platforms, including rule creation, parsing, correlation, and investigations (required).
Experience implementing playbooks (e.g., Palo Alto XSOAR) and threat hunting activities (required).
Familiarity with methodologies like the Cyber Kill Chain and MITRE ATT&CK framework (required).
Experience with multi-cloud platforms (Azure, AWS) (required).
Technical Knowledge:

Strong understanding of TCP/IP topology, network protocols, Active Directory, and file permissions.
Familiarity with network and security systems (e.g., network devices, security devices, endpoint devices, EDR, firewalls, and operating systems including Windows, Linux, and Mac).
Scripting skills in PowerShell or Python are a plus.
Certifications:

Security+ or CEH certification (required). Other Requirements:

U.S. citizenship and the ability to obtain a security clearance (required).
Strong organizational skills, attention to detail, and excellent communication abilities.
What We Offer:
Fully remote position with a preference for candidates in the Eastern Time Zone.
Collaborative, mission-driven environment.
Equal opportunity employer: Cellebrite embraces diversity and is committed to providing an inclusive workplace for all individuals, regardless of sex, gender identity, sexual orientation, race, color, religion, national origin, disability, veteran status, age, or any other legally protected status.
Join our team and play a critical role in protecting communities and enabling justice through cutting-edge digital intelligence solutions.

Apply Now