Threat Responder

Reporting directly to the Manager, Adversary Response & Threat Hunting, the Threat Responder will work within the Incident Response processes, engage with outside IR (Incident Response) firms, and internal customers.  The Threat Responder will be a primary response analyst during IR engagements, utilizing a myriad of EDR tools. They will support the response efforts of the IR team and squad as necessary. 

In this role, you’ll get to:

• Provide Incident Response support and perform investigations in customer environments


• Conduct malware analysis and reporting 


• Conduct research based threat hunting initiatives 


• Validate suspicious events and incidents by using open-source and proprietary intelligence sources


• Report and document incidents in a case management system


• Document new tools and techniques and disseminate them to the rest of the team


• Keep up-to-date with information security news, techniques, and trends


• Escalate any gaps in log collection or reporting


• Provide support and collaboration with internal teams to produce content regarding new threats, techniques, and information 


• Lead customers through the incident response lifecycle 

To be successful in this role, you’ll need to:

• Be experienced in Digital Forensics


• Be experienced with Incident Handling and Response


• Possess experience in Endpoint Detection and Response Tools such as SentinelOne, Defender and Crowdstrike


• Demonstrate a strong ability to  communicate with and present to customers


• Possess experience in leveraging common IR frameworks (e.g. PICERL, NIST)


• Possess experience in SOAR, Ticketing Systems and Threat Intelligence platforms


• Possess experience in SIEM platforms  


• Have an understanding of attacker methodology including the tactics, techniques, and procedures

ITAR Compliance

This position will have access to customer data and as such is subject to International Traffic in Arms Regulations (ITAR). Upon application, candidates will be asked to confirm that they are a U.S. Person as defined by the following:

• A citizen of the U.S.;


• A lawful permanent resident of the United States; 


• A person admitted to the United States as a refugee; or


• A person that has been granted asylum by the United States government.

The intent of this requirement is not to verify employment eligibility overall, but to ensure compliance with import/export regulations. If you do not meet these requirements, we encourage you to apply for other open roles at Deepwatch. This information will be verified upon offer of employment.

Statutory Pay Disclosure 

The anticipated salary range for this role is $127,00 - $160,000 + stock options + benefits. Actual compensation may vary from posted hiring range based upon geographic location, work experience, education, and/or skill level.