Map detection content to MITRE ATT&CK tactics and techniques to identify coverage strengths and gaps. * Partner with SOC analysts to improve alert triage, investigation playbooks, enrichment, and ...
Map detection content to MITRE ATT&CK tactics and techniques to identify coverage strengths and gaps. * Partner with SOC analysts to improve alert triage, investigation playbooks, enrichment, and ...
Map detection content to MITRE ATT&CK tactics and techniques to identify coverage strengths and gaps. * Partner with SOC analysts to improve alert triage, investigation playbooks, enrichment, and ...
Map detection content to MITRE ATT&CK tactics and techniques to identify coverage strengths and gaps. * Partner with SOC analysts to improve alert triage, investigation playbooks, enrichment, and ...
Map detection content to MITRE ATT&CK tactics and techniques to identify coverage strengths and gaps. * Partner with SOC analysts to improve alert triage, investigation playbooks, enrichment, and ...
Map detection content to MITRE ATT&CK tactics and techniques to identify coverage strengths and gaps. * Partner with SOC analysts to improve alert triage, investigation playbooks, enrichment, and ...
$114K - $156K/yr
The team works across enterprise security, security operations, and detection security engineering to strengthen Upstart's security posture through scalable controls, effective monitoring and ...
The Security Team is responsible for providing key security capabilities covering application, cloud and enterprise security, incident response, detection and GRC. Our team is looking for an ...
The Security Team is responsible for providing key security capabilities covering application, cloud and enterprise security, incident response, detection and GRC. Our team is looking for an ...
Responsibilities : • Conduct and support CBRN detection operations in conjunction with program stakeholders in post-deployment communications. • Conduct CBRN detection operations • Manage and ...
Responsibilities : • Conduct and support CBRN detection operations in conjunction with program stakeholders in post-deployment communications. • Conduct CBRN detection operations • Manage and ...
Responsibilities : • Conduct and support CBRN detection operations in conjunction with program stakeholders in post-deployment communications. • Conduct CBRN detection operations • Manage and ...
Responsibilities : • Conduct and support CBRN detection operations in conjunction with program stakeholders in post-deployment communications. • Conduct CBRN detection operations • Manage and ...
SOC Threat Hunter
Portland, OR · On-site
The Threat Hunter proactively identifies, investigates, and helps mitigate advanced cyber threats that may evade automated detection and traditional monitoring. This role develops threat hypotheses ...
SOC Threat Hunter
Portland, OR · On-site
The Threat Hunter proactively identifies, investigates, and helps mitigate advanced cyber threats that may evade automated detection and traditional monitoring. This role develops threat hypotheses ...
Police Detective (X2)
Warm Springs, OR · On-site
Search crime scenes, interview persons, secure and collaborate testimony, secure and preserve evidence, serve warrants and subpoenas, make arrests and perform all steps required in the investigation ...
Police Detective (X2)
Warm Springs, OR · On-site
Search crime scenes, interview persons, secure and collaborate testimony, secure and preserve evidence, serve warrants and subpoenas, make arrests and perform all steps required in the investigation ...
Loss Prevention Detective
Medford, OR · On-site
$15.50 - $20.40/hr
Marshalls At TJX Companies, every day brings new opportunities for growth, exploration, and achievement. You'll be part of our vibrant team that embraces diversity, fosters collaboration, and ...
Loss Prevention Detective
Medford, OR · On-site
$15.50 - $20.40/hr
Marshalls At TJX Companies, every day brings new opportunities for growth, exploration, and achievement. You'll be part of our vibrant team that embraces diversity, fosters collaboration, and ...
Loss Prevention Detective
$15.55 - $20.40/hr
Marshalls At TJX Companies, every day brings new opportunities for growth, exploration, and achievement. You'll be part of our vibrant team that embraces diversity, fosters collaboration, and ...
Loss Prevention Detective
$15.55 - $20.40/hr
Marshalls At TJX Companies, every day brings new opportunities for growth, exploration, and achievement. You'll be part of our vibrant team that embraces diversity, fosters collaboration, and ...
Loss Prevention Detective
Albany, OR · On-site
$15.55 - $20.40/hr
Marshalls At TJX Companies, every day brings new opportunities for growth, exploration, and achievement. You'll be part of our vibrant team that embraces diversity, fosters collaboration, and ...
Loss Prevention Detective
Albany, OR · On-site
$15.55 - $20.40/hr
Marshalls At TJX Companies, every day brings new opportunities for growth, exploration, and achievement. You'll be part of our vibrant team that embraces diversity, fosters collaboration, and ...
Loss Prevention Detective
Portland, OR · On-site
$16.80 - $20.40/hr
Sierra At TJX Companies, every day brings new opportunities for growth, exploration, and achievement. You'll be part of our vibrant team that embraces diversity, fosters collaboration, and ...
Loss Prevention Detective
Portland, OR · On-site
$16.80 - $20.40/hr
Sierra At TJX Companies, every day brings new opportunities for growth, exploration, and achievement. You'll be part of our vibrant team that embraces diversity, fosters collaboration, and ...
Loss Prevention Detective
Medford, OR · On-site
$15.50 - $20.40/hr
Marshalls At TJX Companies, every day brings new opportunities for growth, exploration, and achievement. You'll be part of our vibrant team that embraces diversity, fosters collaboration, and ...
Loss Prevention Detective
Medford, OR · On-site
$15.50 - $20.40/hr
Marshalls At TJX Companies, every day brings new opportunities for growth, exploration, and achievement. You'll be part of our vibrant team that embraces diversity, fosters collaboration, and ...
Loss Prevention Detective
Medford, OR · On-site
$15.50 - $20.40/hr
Marshalls At TJX Companies, every day brings new opportunities for growth, exploration, and achievement. You'll be part of our vibrant team that embraces diversity, fosters collaboration, and ...
Loss Prevention Detective
Medford, OR · On-site
$15.50 - $20.40/hr
Marshalls At TJX Companies, every day brings new opportunities for growth, exploration, and achievement. You'll be part of our vibrant team that embraces diversity, fosters collaboration, and ...
Loss Prevention Detective
Medford, OR · On-site
$15.50 - $20.40/hr
Marshalls At TJX Companies, every day brings new opportunities for growth, exploration, and achievement. You'll be part of our vibrant team that embraces diversity, fosters collaboration, and ...
Loss Prevention Detective
Medford, OR · On-site
$15.50 - $20.40/hr
Marshalls At TJX Companies, every day brings new opportunities for growth, exploration, and achievement. You'll be part of our vibrant team that embraces diversity, fosters collaboration, and ...
Loss Prevention Detective
Portland, OR · On-site
$16.80 - $20.40/hr
Marshalls At TJX Companies, every day brings new opportunities for growth, exploration, and achievement. You'll be part of our vibrant team that embraces diversity, fosters collaboration, and ...
Loss Prevention Detective
Portland, OR · On-site
$16.80 - $20.40/hr
Marshalls At TJX Companies, every day brings new opportunities for growth, exploration, and achievement. You'll be part of our vibrant team that embraces diversity, fosters collaboration, and ...
Loss Prevention Detective
$15.50 - $20.40/hr
Marshalls At TJX Companies, every day brings new opportunities for growth, exploration, and achievement. You'll be part of our vibrant team that embraces diversity, fosters collaboration, and ...
Loss Prevention Detective
$15.50 - $20.40/hr
Marshalls At TJX Companies, every day brings new opportunities for growth, exploration, and achievement. You'll be part of our vibrant team that embraces diversity, fosters collaboration, and ...
Guide and coach Olo's Blue Team on Information Protection, Incident Detection and Response and Service Delivery. * You will provide strategic and technical oversight to the team and the program.
Guide and coach Olo's Blue Team on Information Protection, Incident Detection and Response and Service Delivery. * You will provide strategic and technical oversight to the team and the program.
SOC Threat Hunter
Portland, OR · On-site
The role involves collaboration with various teams to enhance detection capabilities and support investigations. Responsibilities : • Develop and execute hypothesis-driven hunts across enterprise ...
SOC Threat Hunter
Portland, OR · On-site
The role involves collaboration with various teams to enhance detection capabilities and support investigations. Responsibilities : • Develop and execute hypothesis-driven hunts across enterprise ...
Detection information
What is the difference between Detection vs Security Analyst?
| Aspect | Detection | Security Analyst |
|---|---|---|
| Required Credentials | Certifications like CompTIA Security+, CEH | Same certifications often required |
| Work Environment | Monitoring security systems, analyzing alerts | Investigating security incidents, reporting |
| Employer & Industry Usage | Used in cybersecurity teams across various industries | Employed in IT security departments |
| Search & Comparison Intent | Understanding detection roles in cybersecurity | Exploring security analyst responsibilities |
Detection focuses on identifying security threats through monitoring and analyzing alerts, while Security Analysts investigate and respond to security incidents. Both roles require similar certifications and work in cybersecurity environments, but Detection is more about the identification process, whereas Security Analysts handle incident response and analysis.
Full-time
Re-posted 5 days ago
Lam Research rating
8.2
Based on 46 frontline employees who took The Breakroom Quiz
129th of 487 rated machine equipment manufacturers
Job description
Job Summary
The Cyber Threat Analytics Analyst is responsible for identifying, developing, and improving the organization's ability to detect malicious behavior, suspicious activity, and security anomalies across the enterprise. This role is part Information Security team focused on bringing detection development, threat analysis operationalization, SIEM correlation, behavioral analytics, and AI-assisted threat detection capabilities into the organization.The analyst will work closely with Security Operations, Incident Response, and Vulnerability Management teams to improve detection coverage, reduce false positives, and identify threats that may bypass traditional controls.
Job Responsibilities
Who We're Looking For
We are looking for an analytical and curious cybersecurity professional who enjoys finding patterns in large volumes of security data. The ideal candidate understands how attackers operate, how enterprise systems generate security telemetry, and how to turn threat intelligence into meaningful detections. The right person for this role should be comfortable working across SIEM data, endpoint telemetry, identity logs, cloud activity, email security events, network data, and behavioral analytics platforms. They should be able to think like an attacker, understand normal business behavior, and identify signals that indicate suspicious or malicious activity.
Strong candidates will have experience in one or more of the following areas:
Preferred Qualifications
Our commitment
We believe it is important for every person to feel valued, included, and empowered to achieve their full potential. By bringing unique individuals and viewpoints together, we achieve extraordinary results.
Lam Research ("Lam" or the "Company") is an equal opportunity employer. Lam is committed to and reaffirms support of equal opportunity in employment and non-discrimination in employment policies, practices and procedures on the basis of race, religious creed, color, national origin, ancestry, physical disability, mental disability, medical condition, genetic information, marital status, sex (including pregnancy, childbirth and related medical conditions), gender, gender identity, gender expression, age, sexual orientation, or military and veteran status or any other category protected by applicable federal, state, or local laws. It is the Company's intention to comply with all applicable laws and regulations. Company policy prohibits unlawful discrimination against applicants or employees.
Lam offers a variety of work location models based on the needs of each role. Our hybrid roles combine the benefits of on-site collaboration with colleagues and the flexibility to work remotely and fall into two categories - On-site Flex and Virtual Flex. 'On-site Flex' you'll work 3+ days per week on-site at a Lam or customer/supplier location, with the opportunity to work remotely for the balance of the week. 'Virtual Flex' you'll work 1-2 days per week on-site at a Lam or customer/supplier location, and remotely the rest of the time.
Our Perks and Benefits
At Lam, our people make amazing things possible. That's why we invest in you throughout the phases of your life with a comprehensive set of outstanding benefits.
The Cyber Threat Analytics Analyst is responsible for identifying, developing, and improving the organization's ability to detect malicious behavior, suspicious activity, and security anomalies across the enterprise. This role is part Information Security team focused on bringing detection development, threat analysis operationalization, SIEM correlation, behavioral analytics, and AI-assisted threat detection capabilities into the organization.The analyst will work closely with Security Operations, Incident Response, and Vulnerability Management teams to improve detection coverage, reduce false positives, and identify threats that may bypass traditional controls.
Job Responsibilities
- Develop, test, tune, and maintain SIEM detection rules, log correlation searches, alerts, dashboards, and analytics.
- Translate threat intelligence, adversary tactics, and emerging attack trends into actionable detections.
- Build and improve analytics to identify malicious behavior, compromised accounts, lateral movement, and anomalous activity.
- Use AI-driven analytics, UEBA, and behavioral baselining to identify activity that deviates from normal user, endpoint, network, cloud, and application behavior.
- Map detection content to MITRE ATT&CK tactics and techniques to identify coverage strengths and gaps.
- Partner with SOC analysts to improve alert triage, investigation playbooks, enrichment, and escalation criteria.
- Support Incident Response during active investigations by analyzing logs, identifying patterns, and developing new detections from lessons learned.
- Identify gaps in logging, telemetry, and visibility and recommend improvements to security monitoring coverage.
- Document detection logic, assumptions, data sources, expected behavior, response guidance, and tuning decisions.
- Track detection effectiveness, alert fidelity, false positive rates, detection coverage, and time-to-detect improvements.
Who We're Looking For
We are looking for an analytical and curious cybersecurity professional who enjoys finding patterns in large volumes of security data. The ideal candidate understands how attackers operate, how enterprise systems generate security telemetry, and how to turn threat intelligence into meaningful detections. The right person for this role should be comfortable working across SIEM data, endpoint telemetry, identity logs, cloud activity, email security events, network data, and behavioral analytics platforms. They should be able to think like an attacker, understand normal business behavior, and identify signals that indicate suspicious or malicious activity.
Strong candidates will have experience in one or more of the following areas:
- Security Operations Center analysis
- Threat hunting
- SIEM rule development
- Threat intelligence analysis
- Incident response
- Detection tuning
- Behavioral analytics or UEBA
- Cloud, endpoint, identity, or network security monitoring
Preferred Qualifications
- Experience with SIEM platforms such as Microsoft Sentinel, Splunk, Exabeam, Securonix, or similar tools.
- Experience writing detection queries using KQL, SPL, SQL, or similar query languages.
- Familiarity with Microsoft Defender XDR, Defender for Endpoint, Defender for Identity, Microsoft Sentinel, Entra ID, or similar security platforms.
- Understanding of MITRE ATT&CK and common adversary tactics, techniques, and procedures.
- Experience using threat intelligence to create detections and threat hunting hypotheses.
- Experience with AI-assisted analytics, UEBA, anomaly detection, or behavioral baselining.
- Familiarity with cloud security monitoring across Azure, AWS, or Google Cloud.
- Ability to analyze logs from identity systems, endpoints, firewalls, proxies, email gateways, SaaS applications, and cloud platforms.
- Experience documenting detection logic, investigation steps, and response guidance.
- Scripting or automation experience with Python, PowerShell, Logic Apps, or similar tools.
- Familiarity with MISP, STIX/TAXII, threat intelligence feeds, or indicator management.
- Certifications such as GCIH, GCIA, GCDA, GMON, GCTI, GCFA, Security+, CySA+, CISSP, or equivalent experience.
Our commitment
We believe it is important for every person to feel valued, included, and empowered to achieve their full potential. By bringing unique individuals and viewpoints together, we achieve extraordinary results.
Lam Research ("Lam" or the "Company") is an equal opportunity employer. Lam is committed to and reaffirms support of equal opportunity in employment and non-discrimination in employment policies, practices and procedures on the basis of race, religious creed, color, national origin, ancestry, physical disability, mental disability, medical condition, genetic information, marital status, sex (including pregnancy, childbirth and related medical conditions), gender, gender identity, gender expression, age, sexual orientation, or military and veteran status or any other category protected by applicable federal, state, or local laws. It is the Company's intention to comply with all applicable laws and regulations. Company policy prohibits unlawful discrimination against applicants or employees.
Lam offers a variety of work location models based on the needs of each role. Our hybrid roles combine the benefits of on-site collaboration with colleagues and the flexibility to work remotely and fall into two categories - On-site Flex and Virtual Flex. 'On-site Flex' you'll work 3+ days per week on-site at a Lam or customer/supplier location, with the opportunity to work remotely for the balance of the week. 'Virtual Flex' you'll work 1-2 days per week on-site at a Lam or customer/supplier location, and remotely the rest of the time.
Our Perks and Benefits
At Lam, our people make amazing things possible. That's why we invest in you throughout the phases of your life with a comprehensive set of outstanding benefits.
What Lam Research employees say
Pay
Benefits
Hours and flexibility
Workplace
Get the full story on Breakroom
About Lam Research
Sourced by ZipRecruiter
Lam Research designs and builds products for semiconductor manufacturing, including equipment for thin film deposition, plasma etch, photoresist strip, and wafer cleaning processes.
Industry
Manufacturing
Company size
10,000+ Employees
Headquarters location
Fremont, CA, US
Year founded
1980