Detection and Response Analyst- MDR (SOC)

As a Detection and Response Analyst at Rapid7's Managed Detection and Response (MDR) team, you will have the opportunity to leverage Rapid7's advanced tools and threat intelligence to investigate and triage high-priority security events in diverse customer environments. In this role, you will be a vital member of the 24/7/365 Security Operations Center (SOC). Your responsibilities will include conducting thorough investigations on various threats such as account compromises and zero-day exploits across workstations, servers, and cloud platforms. You will document your findings using the MITRE ATT&CK Framework, encompassing forensic, malware, and root-cause analysis. Collaboration and communication are key aspects of this role, as you will closely work with Customer Advisors to provide insights and recommendations, and collaborate with fellow analysts to share threat intelligence and best practices. Additionally, you will contribute to enhancing detection capabilities by providing feedback to the Threat Intelligence and Detection Engineering team. The ideal candidate for this position should possess a strong understanding of Windows, MacOS/Darwin, and Linux operating systems. Knowledge of threat actor tactics such as lateral movement, privilege escalation, and persistence is essential. Practical experience with CTF/HTB challenges and penetration testing tools like Mimikatz and Metasploit is highly valued. Hands-on experience with forensic artifact and malware sample analysis is also desired. A passion for continuous learning, effective collaboration skills, and a customer-centric approach are qualities that we are looking for in potential candidates. Rapid7 is committed to building a secure digital world and offers a dynamic and collaborative work environment. Joining Rapid7 means being part of a team that encourages career growth, pushes the boundaries of cybersecurity, and works towards protecting over 10,000 global customers from evolving threats.,