Remote opportunity at
Blackpoint CyberSenior MDR Analyst
Blackpoint Cyber is hiring a Senior MDR Analyst to work in its 24x7x365 Security Operations Center. The role is full-time and remote. It focuses on reviewing…
Career Tools
About This Role
Blackpoint Cyber is hiring a Senior MDR Analyst to work in its 24x7x365 Security Operations Center. The role is full-time and remote. It focuses on reviewing irregular network and system activity, hunting for threats, and serving as a senior escalation point for complex intrusion analysis. It suits an experienced security professional who enjoys investigation, explaining technical findings clearly, and improving how a SOC operates. Blackpoint is a company whose technology…
Job Description
Blackpoint Cyber is hiring a Senior MDR Analyst to work in its 24x7x365 Security Operations Center. The role is full-time and remote. It focuses on reviewing irregular network and system activity, hunting for threats, and serving as a senior escalation point for complex intrusion analysis. It suits an experienced security professional who enjoys investigation, explaining technical findings clearly, and improving how a SOC operates.
Blackpoint is a company whose technology covers threat hunting and the detection and remediation of threats. Its founders were former National Security Agency cyber operators who applied that experience to commercial customers. The company is growing quickly after a recent $190 million Series C round, and it values careful execution, personal ownership, and sound principles.
Day-to-day work includes writing incident analysis reports, building test labs to study new techniques, and reviewing sandbox output for additional indicators of compromise. The analyst also produces actionable threat and vulnerability analysis for a range of separate customer environments, helps design SOC processes, and works with other business units to close issues. Shifts run on weekdays, either 12:00 PM to 8:00 PM ET or 12:00 AM to 8:00 AM ET.
Responsibilities
- Review irregular network and endpoint activity around the clock in a 24x7x365 SOC through threat hunting
- Research emerging threats and act as an escalation contact for advanced intrusion analysis
- Write incident analysis reports and work with business units and customers to close issues
- Help design operational processes and procedures that improve SOC efficiency
- Deliver threat and vulnerability analysis for separate customer environments
- Build test labs to research new techniques and contribute to threat knowledge
- Review sandbox results for further indicators of compromise found in analyzed artifacts
Requirements
- 5+ years in an information security role; relevant training or certification can replace one year
- Hands-on time inside a SOC
- 2+ years of triage work on EDR and NGAV alerts, plus incident response support
- Deep knowledge of assessing threat indicators in Windows environments, including malware, anomalous behavior, root-level compromise, and forensic artifacts
- Solid grasp of any two of Windows, Linux, or macOS
- Familiarity with the ELK stack, including dashboards, Logstash configuration, and searching
- Scripting in PowerShell, Python, and Go
- Working knowledge of Amazon cloud services like EC2, S3, and IAM, plus Azure or M365
- Track record of building and running threat hunts that surface new or possible incidents
- Sharp analytical mind, with critical thinking and good problem-solving instincts
- Clear written and spoken communication that works for engineers and non-engineers alike
Qualifications
- A bachelor's degree in computing or another technical field
- Network or system administration and engineering experience
- Deep forensic knowledge of Windows, macOS, or Linux
- Digital forensics and incident response background is a plus
- Malware analysis, behavioral or static, using tools such as IDA, Cuckoo Sandbox, and x86/x64 debugging
- Penetration testing, red or blue team work, capture the flag competitions, or development experience
Core Skills
Benefits
- U.S. staff get life insurance plus health, vision, and dental coverage
- Robust 401(k) plan
- Discretionary time off
- International employees receive benefits according to local market standards
- Global equity participation, with terms that depend on location and how someone is employed
Frequently Asked Questions
Answers are based only on the employer’s listing; where it doesn’t say, neither do we.
Is this role remote?
Yes. The posting lists the role as remote and full-time.
Which shifts are offered?
The posting lists two weekday shifts: 12:00 PM to 8:00 PM ET, and 12:00 AM to 8:00 AM ET.
What experience is required?
The posting asks for 5+ years in information security, including 2+ years of triage work on EDR and NGAV alerts.
Is a salary listed?
The posting does not specify a salary.
What benefits are offered in the US?
U.S. staff get life insurance plus health, vision, and dental coverage, a 401(k), and discretionary time off, according to the posting.
Sample Interview Questions
AI-generated questions tailored to this specific role — a preview of the full practice set.