This position is posted by Jobgether on behalf of a partner company. We are currently looking for a Principal Advanced Threat Response Analyst in United States.
This is a senior-level cybersecurity role focused on defending enterprise and cloud environments against sophisticated and evolving cyber threats. You will lead high-impact investigations into advanced persistent threats, ransomware campaigns, and complex multi-stage attacks while driving both proactive and reactive security operations. The role blends deep technical expertise in incident response, threat hunting, and digital forensics with strong leadership in coordinating cross-functional response efforts. You will operate at the forefront of threat detection and security engineering, shaping how the organization identifies, contains, and prevents attacks. Working in a highly collaborative global security function, you will partner with engineering, architecture, and red teams to strengthen defenses across systems and platforms. This position offers the opportunity to directly influence enterprise security strategy and resilience at scale.
Accountabilities:- Lead end-to-end investigations of advanced cyber threats including APTs, ransomware, insider threats, and nation-state attacks across enterprise and cloud environments
- Drive proactive threat hunting initiatives focused on emerging attacker techniques, behavioral analytics, and detection gap identification
- Conduct incident command during major security events, coordinating response teams and communicating with executive stakeholders
- Develop, tune, and automate detection capabilities using SIEM and EDR platforms such as Splunk, Sentinel, and related tools
- Design and execute purple team exercises and adversary simulations to evaluate detection and response effectiveness
- Collaborate with red teams and offensive security engineers to analyze attacker tools, techniques, and procedures and translate insights into defensive controls
- Create incident response playbooks, containment strategies, and long-term remediation plans to improve security posture
- Contribute to threat intelligence programs by enriching internal feeds with findings from investigations and external research
- Partner with engineering and infrastructure teams to strengthen security controls across endpoint, network, and cloud environments
- Conduct tabletop exercises and readiness simulations to validate incident response capabilities and identify gaps
- Mentor junior analysts and contribute to building a high-performance threat response function
Requirements:
- 10+ years of experience in cybersecurity roles such as incident response, threat hunting, digital forensics, SOC operations, or threat intelligence
- Proven experience leading investigations of advanced persistent threats and complex multi-vector cyberattacks
- Strong knowledge of the MITRE ATT&CK framework, kill chain analysis, and adversary emulation techniques
- Hands-on experience with enterprise and cloud environments (AWS, Azure, GCP) from a defensive security perspective
- Deep expertise in SIEM platforms (Splunk, Sentinel, ELK) and EDR solutions (CrowdStrike, Defender, Carbon Black, etc.)
- Strong understanding of offensive security tools and techniques (e.g., Cobalt Strike, Mimikatz, Metasploit) to build effective detections
- Proficiency in scripting and automation using Python, PowerShell, or Bash for security operations and data analysis
- Experience designing and executing purple team exercises and incident response simulations
- Strong communication and leadership skills, including executive-level reporting and cross-functional collaboration
- Ability to operate in high-pressure environments with strong analytical and critical thinking skills
- Relevant certifications such as GCFA, GCIH, GNFA, GREM, OSCP, or equivalent are highly valued
Benefits:
- Competitive salary range aligned with U.S. market standards for senior cybersecurity roles (approx. $120,500 – $276,500 USD base, depending on location and experience)
- Performance-based incentives and potential bonus compensation
- Comprehensive health, dental, and vision insurance coverage
- Strong focus on employee wellbeing and mental health support programs
- Retirement savings plan and financial wellness resources
- Flexible remote-first work arrangement
- Career development programs and continuous learning opportunities in advanced cybersecurity domains
- Opportunity to work on large-scale, high-impact global security challenges
- Inclusive and collaborative work culture with strong emphasis on innovation and knowledge sharing
- Exposure to cutting-edge threat intelligence, detection engineering, and incident response practices
How Jobgether works:
We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team.
We appreciate your interest and wish you the best!
Why Apply Through Jobgether?
Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.
#LI-CL1