Lead Detection & Response Analyst

Rapid7

Rapid7

IT
Arlington, VA, USA
Posted on Tuesday, November 7, 2023

SOC Shift Lead

Arlington, VA

Are you passionate about growing and supporting teams of junior threat analysts? How about leading the charge against adversaries across a dynamic target base and enabling your team to find evil at scale? As a SOC Shift Lead on Rapid7's Managed Detection and Response Tactical Operations team, you will lead a group of extremely talented, driven, and creative front line analysts performing real-time analysis of threats targeting our customers.

Rapid7's Managed Detection and Response service works to detect breaches, respond and investigate attacker activity, and help our customers improve their abilities to deal with threats. Our MDR analysts pride themselves on their ability to think critically, adapt to constantly changing attack methodologies, and deliver top-notch Threat Detection and Incident Response services.


Job Responsibilities:

  • Serve as the front line leader for a group of Associate Analysts at the Arlington, VA SOC.

  • Provide guidance, goals, and assistance to a team of world-class analysts in a 24x7 setting.

  • Work with other Shift Leads and SOC Managers to maintain scheduling and shifts to ensure 24x7x365 coverage.

  • Collaborate closely with MDR operations teams in other Rapid7 SOCs.

  • Serve as a technical escalation point for complex and high severity security incidents for our customers.

  • Assist in the development of analyst-enablement programs to promote career and capability growth for analysts.

  • Collaborate with MDR customers and Customer Advisors to balance customer requests with analyst operations.

  • Promote healthy, positive work habits and environments to reduce analyst fatigue and increase collaboration between analyst teams and locations.

  • Ensure we are meeting service delivery for 1200+ global customers and meeting or exceeding SLOs.

Job Requirements:

  • 2+ years of professional management or team lead experience, preferably in SOC/CIRT environments.

  • 2+ years of technical SOC experience consisting of Incident response, digital forensics, and threat hunting.

  • Capable of mentoring junior analysts and otherwise enabling the process through team contributions and cross functional collaboration.

  • Can speak to the lifecycle of an incident and know exactly what artifacts to look for, where, and why at any stage

  • Experience with common cybersecurity tools and techniques.

  • Up-to-date knowledge of attacker techniques, tools, and procedures.

  • Bachelor's degree or foreign equivalent in Engineering, Computer Science, MIS, CIS or related field, or equivalent experience.

  • Outstanding verbal and written communication skills.

  • Differentiators:

  • Prior SOC management experience.

  • Prior incident response or threat analysis experience.

  • Experience with Rapid7 products or services.

We know that the best ideas and solutions come from multi-dimensional teams. That’s because these teams reflect a variety of backgrounds and professional experiences. If you are excited about this role and feel your experience can make an impact, please don’t be shy - apply today.

About Rapid7


At Rapid7, we are on a mission to create a secure digital world for our customers, our industry, and our communities. We do this by embracing tenacity, passion, and collaboration to challenge what’s possible and drive extraordinary impact.

Here, we’re building a dynamic workplace where everyone can have the career experience of a lifetime. We challenge ourselves to grow to our full potential. We learn from our missteps and celebrate our victories. We come to work every day to push boundaries in cybersecurity and keep our 10,000 global customers ahead of whatever’s next.

Join us and bring your unique experiences and perspectives to tackle some of the world’s biggest security challenges.


All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, age, national origin, disability, protected veteran status or any other status protected by applicable national, federal, state or local law.