Senior Threat Detection and Response (TDR) Engineer)

Job Description

We have a position for a Senior Threat Detection and Response (TDR) Engineer) with one of our clients in Atlanta, GA for an initial contract duration of 3 months. No third party candidates considered for this position.

Our Client is searching for a Threat Detection & Response (TDR) Analyst that will join the Security Operations Center (SOC) and respond to cyber threats facing Client networks, systems, and information assets.  The TDR Analyst is engaged throughout the incident lifecycle from escalation to resolution and acts by collecting and analyzing threat intelligence, performing security monitoring activities, taking appropriate action based on exposure, and reporting recommendations to leadership.  This position reports to the Senior Manager of Threat Detection and Response.

Successful candidates will demonstrate a strong business acumen and possess a blend of general business, technology, and security competencies. This is a unique opportunity to work for a telecommunications company protecting national critical infrastructure. 

Primary Responsibilities:

• Detect and respond to workstation, server and network incidents using SIEM, behavioral analytics, and network analysis to promptly detect and mitigate the impact of cyber incidents.
• Track, respond, and document cybersecurity incidents in a consistent and well-organized manner from detection through resolution.
• Perform analysis of log files from a variety of sources (e.g., Windows or Linux hosts, network traffic, firewalls, intrusion detection system [IDS] logs, or application logs) to identify potential threats to the environment.
• Perform incident triage, to include scope, urgency, and potential impact, making recommendations that enable expeditious remediation.
• Review and respond to questions and escalated security events from Tier I analysts.
• Stay current with the latest trends in threat intelligence, security monitoring and incident response.
• Collect and review intelligence data from relevant sources including subscription and open-source feeds.
• Create and monitor reference sets across different applications to support threat hunting and monitoring.
• Develop ad-hoc scripts to extend capabilities and complete tasks-at-hand.