Digital Forensics Analyst (SOC)

In this role as a Detection and Response Analyst at Rapid7's Managed Detection and Response (MDR) team, you will have the opportunity to investigate and triage high-priority security events across various customer environments using Rapid7's advanced tools and threat intelligence. Key Responsibilities: - Investigate Malicious Activity: Conduct comprehensive investigations on a wide range of threats, including account compromises and zero-day exploits, across workstations, servers, and cloud environments. - Generate Incident Reports: Document investigations utilizing the MITRE ATT&CK Framework, encompassing forensic, malware, and root-cause analyses. - Collaborate and Communicate: Engage closely with Customer Advisors to share findings and recommendations, and collaborate with fellow analysts to exchange threat intelligence and best practices. - Enhance Detections: Offer continuous feedback to the Threat Intelligence and Detection Engineering team to enhance detection capabilities. Qualifications Required: - Strong understanding of Windows, MacOS/Darwin, and Linux operating systems. - Fundamental knowledge of threat actor tactics such as lateral movement, privilege escalation, and persistence. - Practical experience with CTF/HTB challenges and penetration testing tools like Mimikatz and Metasploit. - Hands-on experience with forensic artifact and/or malware sample analysis. - A keen interest in continuous learning, effective collaboration skills, and a customer-centric mindset. Rapid7 is committed to building a secure digital world and offers a dynamic and collaborative work environment where you can advance your career, push the boundaries of cybersecurity, and contribute to safeguarding over 10,000 global customers from emerging threats.,