Threat Detection & Response Analyst

Protingent

San Jose, CA

Apply

JOB DETAILS

SALARY

$80–$85 Per Hour

SKILLS

Amazon Web Services (AWS), Analysis Skills, Best Practices, Business Operations, CISSP - Certified Information Systems Security Professional, Cloud Computing, Communication Skills, CompTIA - Computing Technology Industry Association, CompTIA Security+, Computer Hacking, Computer Science, Computer Security, Continuous Improvement, Cross-Functional, Customer Support/Service, Documentation, Endpoint Security, Establish Priorities, Firewalls, Hunting, Incident Response, Information/Data Security (InfoSec), Intrusion Detection Systems, Intrusion Prevention Systems, Linux Operating System, Microsoft Windows Azure, Microsoft Windows Server, Multiplatform/Cross-Platform, Network Monitoring, Onboarding, Protective Services, Reporting Dashboards, Risk Management, Root Cause Analysis, Security Analysis, Security Attacks, Security Information and Event Management (SIEM), Signal-to-noise Ratio (SNR), Splunk, Telemetry, Threat Modeling, Use Cases, Vendor/Supplier Selection

LOCATION

San Jose, CA

POSTED

14 days ago

Job Title: Threat Detection & Response Analyst

Position Description: Protingent Staffing has an exciting contract Threat Detection & Response Analyst with our client located in San Jose, CA.

Job Responsibilities:

Monitor, triage, and investigate security alerts and events across enterprise environments using Splunk SIEM, EDR, network, cloud, and endpoint telemetry.
Analyze security event logs from diverse sources including firewalls, IDS/IPS, endpoint protection platforms, operating systems, and cloud services to identify malicious activity.
Perform initial and advanced analysis of security incidents, determine scope and impact, identify root cause, and recommend containment and remediation actions.
Escalate confirmed incidents appropriately and support end-to-end incident response activities, including coordination with IT, cloud, and infrastructure teams.
Design, validate, tune, and optimize detection logic, correlation rules, dashboards, and alerting use cases to improve signal-to-noise ratio and operational efficiency.
Ensure log ingestion health, completeness, and fidelity across critical infrastructure and enterprise systems.
Support onboarding and integration of new log sources into the Splunk environment, including validation of parsing, normalization, and field extraction.
Conduct proactive threat hunting using SIEM, EDR, CASB, and cloud telemetry to identify advanced or evasive threats that bypass automated detections.
Monitor network traffic and behavioral indicators to detect anomalies, lateral movement, privilege abuse, and data exfiltration attempts.
Prioritize vulnerabilities and remediation efforts based on threat context, asset criticality, and business impact.
Partner with IT and infrastructure teams to track remediation, validate fixes, and reduce recurring risk.
Continuously improve detection coverage, response playbooks, and SOC workflows based on incident learnings and emerging threats.
Maintain accurate documentation for detection use cases, log flows, triage procedures, threat models, and operational standards.
Collaborate closely with cross-functional security and IT teams to ensure rapid, effective response to security incidents.

Job Qualifications:

Bachelor’s degree in Computer Science, Information Security, or a related field; Master’s degree preferred.
5+ years of experience in a SOC, threat detection, or incident response role with hands-on experience
Strong expertise in threat analysis, incident investigation, and response workflows.
Solid understanding of enterprise log sources including Windows/Linux servers, network devices, endpoints, and cloud platforms.
Experience triaging and investigating alerts in complex, multi-platform environments.
Familiarity with cloud environments such as AWS, Azure, or similar, including cloud-native logging and security services.
Knowledge of detection engineering, correlation logic, MITRE ATT&CK techniques, and SOC operational best practices.
Ability to communicate findings clearly and collaborate effectively across technical and non-technical teams.
Comfortable operating in diverse, global environments with strong adaptability and professionalism.
Curious, resilient, and data-driven mindset with a passion for continuous learning and threat research.
Relevant certifications such as CompTIA Security+, CISSP, Pentest+, or similar are a plus.

Job Details:

Job Type: Contract:
Pay Range: $80-$85/hr.
Location: San Jose, CA (Onsite).

Benefits Package: Protingent offers competitive salaries, insurance plan options (HDHP plan or POS plan), education/certification reimbursement, pre-tax commuter benefits, Paid Time Off (PTO), and an administered 401k plan.

About Protingent: Protingent is an Award-Winning provider of top-tier Engineering and IT talent, trusted by companies at the forefront of innovation — from Software and Aerospace to AI, Clean Tech, Medical Devices, and Connected Technologies. We’re passionate about making a positive impact by connecting exceptional talent with meaningful opportunities and helping our clients build the future.

About the Company

Protingent

Resume Resources

Free Resume Templates Free Resume Builder