Principal Advanced Threat Response Analyst
Location
United States
Posted
6 days ago
Salary
$120.5K - $276.5K / year
Seniority
Lead
Job Description
Principal Advanced Threat Response Analyst
Hewlett Packard Enterprise
Role Description At Hewlett Packard Enterprise (HPE), we are seeking a highly experienced and technically proficient Principal Advanced Threat Response Analyst to join our global security organization. The ideal candidate will have over a decade of hands-on experience in incident response, threat hunting, threat intelligence, digital forensics, malware analysis, and incident management, with proven expertise in leading investigations into Advanced Persistent Threats (APT) and other complex, multi-stage intrusions, including widescale Ransomware attacks. This role requires a blend of technical mastery, investigative acumen, and leadership capability. The candidate will drive proactive and reactive threat hunting efforts, lead critical incident response engagements, and develop both short-term containment and long-term remediation strategies to strengthen the organization’s cyber defense and improve overall security posture. This role is fully remote USA. Key Responsibilities - Lead complex threat investigations involving APTs, ransomware, insider threats, and nation-state activity across enterprise and cloud environments. - Drive proactive threat hunting programs focused on emerging TTPs, behavioral analytics, and detection gaps within EDR, SIEM, and network telemetry data. - Develop and execute purple team exercises, simulating advanced adversarial tradecraft to assess detection and response capabilities. - Collaborate with red teams and offensive security engineers to understand attacker tools, techniques, and procedures (TTPs) at a deep technical level and translate that understanding into effective detections. - Perform incident command during major security events — leading multidisciplinary response teams, engaging executive stakeholders, and delivering after-action reports and strategic recommendations. - Develop custom detections, playbooks, and automation in Splunk, Sentinel, or other platforms to improve time-to-detect and time-to-contain metrics. - Mentor and coach junior analysts, hunters, and incident responders — fostering an environment of continuous learning and operational excellence. - Contribute to threat intelligence initiatives, enriching internal intelligence feeds with context from ongoing investigations and external research. - Collaborate with engineering and architecture teams to harden security controls across endpoint, network, and cloud layers. - Conduct tabletop exercises and technical simulations to validate response readiness and identify process or technology gaps. Qualifications - 10+ years of experience in cybersecurity roles focused on incident response, threat hunting, digital forensics, threat intelligence, or SOC operations. - Proven record of leading end-to-end investigations of advanced threat campaigns (APT) or other complex multi-vector attacks. - Strong understanding of MITRE ATT&CK framework, adversary emulation, and kill chain analysis. - Demonstrated expertise in both enterprise IT and cloud security (AWS, Azure, GCP) — from defensive and offensive perspectives. - Working knowledge of red team / offensive security operations and the ability to deconstruct offensive tools (e.g., Cobalt Strike, Empire, Metasploit, Sliver, Mimikatz, other open-source OffSec tools) to detect their presence and behaviors. - Deep knowledge of SIEMs (Splunk, Sentinel, ELK), EDR platforms (CrowdStrike, Carbon Black, Defender ATP), and forensics tools. - Strong scripting or automation experience (Python, PowerShell, Bash) for hunting, enrichment, or data manipulation. - Ability to design and facilitate purple team exercises and incident response tabletop simulations replicating advanced adversary techniques. - Excellent communication and leadership skills; ability to brief executives, collaborate across functions, and guide junior team members. Certifications - Advanced SANS certifications such as GCFA, GREM, GCIA, GNFA, GCTI, GSEC, or GCIH. - Offensive certifications such as OSCP, OSEP, OSED, or CRTO. - Recognition from hands-on platforms (e.g., Hack The Box, Cyber Defenders, TryHackMe) demonstrating technical proficiency. - Cloud security certifications (AWS Security Specialty, Azure Security Engineer, GCP Professional Cloud Security Engineer) are a plus. Benefits - Health & Wellbeing: Comprehensive suite of benefits that supports physical, financial, and emotional wellbeing. - Personal & Professional Development: Specific programs catered to helping you reach any career goals you have. - Unconditional Inclusion: A culture that celebrates individual uniqueness and values varied backgrounds. Salary Information The expected salary/wage range for this position is provided below. Actual offer may vary from this range based upon geographic location, work experience, education/training, and/or skill level. - United States of America: Annual Salary USD 120,500 - 276,500 in Texas. The listed salary range reflects base salary. Variable incentives may also be offered.
Related Guides
Related Categories
Related Job Pages
More Incident Response Analyst Jobs
Contract Analysts
FTI ConsultingFTI Consulting provides expert guidance and strategic solutions to help businesses navigate complex challenges, including financial restructuring, legal dispute
Role Description FTI Consulting is registering Contract Analysts for upcoming Contract Solutions projects expected to start the week of October 6th! Contract Analysts work on a per-project basis and work is performed at the direction of attorneys who provide briefing materials, along with substantive training and support to the Contract Analysts. Contract Analysts will be members of a team that also includes project managers and contract subject matter experts. These are work from home opportunities but candidates must be based in one of the following states: - AL - AZ - CT - DE - DC - GA - IL - IN - LA - ME - MD - MA - MI - NJ - NY - NC - PA - SC - TX - VA - VT Qualifications - Bachelor’s degree - Experience reviewing and analyzing contracts; with a good understanding of contract structure, terminology and terms - Attention to detail, able to identify small nuances in contract language - Critical thinking / logical reasoning skills, able to interpret ambiguous and confusing contract language - Ability to quickly and accurately make decisions, entering data for large volumes of contracts, while also identifying where contract language presents new issues that need to be escalated to senior team members for clarification - Ability to escalate questions about contracts you review in a way that is clear, to the point, and isolates the issue at hand - Experience and comfort working in Microsoft Excel, plus comfortable working in an online review tool Requirements - Experience working in-house at a corporation - Experience drafting and negotiating contracts (In-house and/or law firm) - Experience with Relativity, the platform that we use - Experience working in contract review and artificial intelligence tools like Heretik, Kira, eBrevia, Luminance or DocuSign Insights - A law degree (Juris Doctor or LLM) or Paralegal certification - Data science degree, background or experience - Fluency in a foreign language Benefits - $30 per hour Company Description FTI Consulting is the leading global expert firm for organizations facing crisis and transformation. We work with many of the world’s top multinational corporations, law firms, banks and private equity firms on their most important issues to deliver impact that makes a difference. From resolving disputes, navigating crises, managing risk and optimizing performance, our teams respond rapidly to dynamic and complex situations. At FTI Consulting, you’ll work side-by-side with leaders who have shaped history, helping solve the biggest challenges making headlines today. From day one, you’ll be an integral part of a focused team where you can make a real impact. You’ll be surrounded by an open, collaborative culture that embraces diversity, recognition, professional development and, most importantly, you.
Analyst III
Spargo IncJ. Spargo & Associates, Inc. 1881 Campus Commons Drive, Suite 350, Reston, VA 20191. Application Process Mail resumes to Donna Lynn Copes, VP Human Resources & Client Financial Services, 1881 Campus Commons Drive, Suite 350, Reston, VA 20191.
Role Description This is a remote position for J. Spargo & Associates, Inc. Responsible for creating, updating, and maintaining client and operational databases; create custom reports utilizing SQL Server Reporting Services. - Create and maintain stored procedures, triggers, views, and user-defined functions for use in Reporting and Registration/Housing Application. - Create and run regular updates for membership, exhibiting company, and session information for multiple databases. - Create and run scheduled imports, exports, and reports for clients for multiple departments/databases. - Set up badge runs for registration department based on provided, specific criteria. - Create, schedule, and monitor SQL DTS/SSIS packages designed to update, export, and maintain client data. - Create, maintain, and update databases using database technologies, such as MS SQL Server, SQL, MySQL, SQL Loader, SQL Server Management Studio, SQL Sentry, Web Services, .NET, and T-SQL. - Gather functional requirements and business requirements and write the technical specifications. - Create database objects like tables, views, stored procedures, triggers, and cursors using DDL, DML statements as per functional requirements. - Develop stored procedures and views for managing efficient data retrieval and application development. - Use DMVs, Wait-States & Performance Monitor Counters to find the root cause of performance slow-downs. - Create databases and schema objects including tables, indexes, and applied constraints. - Connect various applications to the database and write functions and stored procedures. - Design SSIS Packages to transfer data across different platforms, validate data during transferring, and archive data files for different DBMS. - Perform day-to-day Database Maintenance tasks - Database Monitoring, Backups, Space Management, and Resource Utilization. - Use SSIS transformations such as Lookup, Derived column, Data conversion, Aggregate, Conditional split, SQL task, Script task, and Send Mail task. - Extensively use SSIS script task (VB) to decrypt and encrypt data to SQL server database. - Extract data from various sources like SQL Server 2008 R2/2014, Oracle, .CSV, Excel, and Text file from Client servers through FTP and SFTP in SSIS packages. - Schedule SSIS packages to import/export OLTP data for multiple databases. - Integrate web service calls with SSIS to download data using SOAP API. - Work with DBA team to upgrade existing SQL servers. - Format SSRS reports using the Global variables and expressions. - Assist the production team in analyzing bugs & resolving them. Qualifications - Bachelor’s Degree in Computer Science or closely related field. Requirements - 37.5+ hours per week. - Annual Wage: $141,941.80. Company Description - J. Spargo & Associates, Inc. - 1881 Campus Commons Drive, Suite 350, Reston, VA 20191. Application Process Mail resumes to Donna Lynn Copes, VP Human Resources & Client Financial Services, 1881 Campus Commons Drive, Suite 350, Reston, VA 20191.
Analyst
Augment RiskWe are a global risk capital and reinsurance solutions broker for move-fast, growth led partners.
Role Description We’re looking for a smart, curious, and motivated graduate or junior analyst to join our agile and ambitious analytics team here at Augment Risk. You’ll work closely with actuaries, data scientists, and brokers to support the delivery of high-quality analytical outputs that drive successful outcomes for our clients. This is a great opportunity for someone who thrives in a fast-paced environment, enjoys solving complex problems, and is eager to take real ownership early in their career. - Prepare and analyse client and market data to support robust, data-driven reinsurance pricing decisions. - Develop the skills to apply actuarial and data science techniques in pricing a range of reinsurance structures. - Support the development and maintenance of pricing tools. - Assist in building dashboards, reports, and visualisations to communicate key insights. - Help automate repeatable processes and streamline workflows using Python, R, SQL, or other coding languages. - Contribute to innovation initiatives through rapid experimentation. - Support the broader analytics team and brokers with ad hoc analysis and modelling as required. - Document models, processes, and assumptions clearly and concisely. - Utilise critical thinking during all analyses to drive successful outcomes for both clients and markets. Qualifications - Bachelor’s Degree, or equivalent, in Finance, Business, Economics or a related field. - Strong analytical and problem-solving skills. - Familiarity with Python, R and/or SQL (or strong willingness to learn). - Good communication skills – able to explain technical concepts in a clear and concise way. - Attention to detail and pride in producing high-quality work. - Genuine interest in reinsurance, insurance, or financial risk. - Comfortable working remotely within a global team and travelling as required to meet clients and markets. Requirements - Must be able to thrive in a fast-paced, startup, non-traditional environment. Benefits - We will provide you with the opportunity to be inventive and innovative, we love challenging industry norms. - You will work in a multi-disciplinary environment, collaborating closely with talented individuals within a flat structure. - You will be trusted and encouraged to take ownership and accountability. - We adopt a work from anywhere approach. Our colleagues and clients are globally distributed which means flexibility is key to delivering great client outcomes, and that’s what matters to us. - We believe in rewarding success, and we want everyone to share in the value we create – therefore, all our employees are offered equity. - We look after our people and their loved ones. Our employee benefits are designed with that in mind. - Augment Risk is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees.
ASM- RESPONSE MANAGEMENT
ZensarAt Zensar, we’re “experience-led everything”. We are committed to conceptualizing, designing, engineering, marketing, and managing digital solutions and experiences for over 130 leading enterprises. We are a company driven by a bold purpose: Together, we shape experiences for better futures. Whether for our clients, our people, or the world around us, this belief powers everything we do. At the heart of our culture is ONE with Client - a set of four core values that reflect who we are and how we work: One Zensar, Nurturing, Empowering, and Client Focus. Part of the $4.8 billion RPG Group, we’re a community of 10,000+ innovators across 30+ global locations, including Milpitas, Seattle, Princeton, Cape Town, London, Zurich, Singapore, and Mexico City. We believe the best work happens when individuality is celebrated, growth is encouraged, and well-being is prioritized. We are an equal employment opportunity (EEO) and affirmative action employer, committed to creating an inclusive workplace. All qualified applicants will be considered without regard to race, creed, color, ancestry, religion, sex, national origin, citizenship, age, sexual orientation, gender identity, disability, marital status, family medical leave status, or protected veteran status.
Role Description - Must have Technical: - Good understanding of Control-M Architecture and Agent/Server Communication - Good knowledge on Control-M tool to manage batch jobs, familiarity with features and usage of tool - Basic Unix - ITIL knowledge - Good to have: - Experience of handling Priority incidents and critical issues related to Control-M. - Basic Unix - Basic MS SQL or Oracle - Soft Skills: - Experience in 24*7 batch monitoring and production support. - Excellent problem-solving skills and attention to detail. - Ability to work collaboratively in a team. - Strong communication and interpersonal skills Qualifications - Good understanding of Control-M Architecture and Agent/Server Communication - Good knowledge on Control-M tool to manage batch jobs - Basic Unix - ITIL knowledge - Experience of handling Priority incidents and critical issues related to Control-M - Basic MS SQL or Oracle - Experience in 24*7 batch monitoring and production support - Excellent problem-solving skills and attention to detail - Ability to work collaboratively in a team - Strong communication and interpersonal skills Requirements - Good understanding of Control-M Architecture and Agent/Server Communication - Good knowledge on Control-M tool to manage batch jobs - Basic Unix - ITIL knowledge - Experience of handling Priority incidents and critical issues related to Control-M - Basic MS SQL or Oracle - Experience in 24*7 batch monitoring and production support - Excellent problem-solving skills and attention to detail - Ability to work collaboratively in a team - Strong communication and interpersonal skills Benefits - Inclusive workplace - Equal employment opportunity (EEO) and affirmative action employer - Encouragement of individuality and growth - Prioritization of well-being Company Description At Zensar, we’re “experience-led everything”. We are committed to conceptualizing, designing, engineering, marketing, and managing digital solutions and experiences for over 130 leading enterprises. We are a company driven by a bold purpose: Together, we shape experiences for better futures. Whether for our clients, our people, or the world around us, this belief powers everything we do. - Part of the $4.8 billion RPG Group - Community of 10,000+ innovators across 30+ global locations - Explore Life at Zensar and join us to Grow. Own. Achieve. Learn.

