AI Cybersecurity Analyst

CyberMSIis a U.S.-based managed XDR and compliance firm built to stop cyberattacks before business disruption happens. We'vean "AI + analyst-on-the-loop" SOC model where AI moves at machine speed while analysts remainaccountable for decisions that impactthe business.

Powered by Microsoft Unified Security Operations using Microsoft Defender XDR and Microsoft Sentinel SIEM, we protect AI agents, identities, apps, data, endpoints, multi-cloud, and third-party access.

We use AI to accelerate correlationof attack signals, enable rapid threat containment, and execute response actions or approvalworkflows based on real businesscontext, not generic playbooks.

Our difference is not AI-based automation alone; it is Accountable & Intelligent automation.

We’regrowing fast and need a high-performingAIThreat Validation Analystto validatethe findings of AI-assisted SecOps agents, ensuring accuracy, context, and appropriate decision-making. This role focuses on confirming the results of automated investigations, refining AI-generated insights, and supporting the operationalization of Microsoft DefenderXDR + Sentinel SIEM detection and response workflows. Analysts in this role play a critical part in maintaininghigh-quality security outcomes and bridging automation with human expertise.

What you’lldo:

• Validate SecOps agent investigations by thoroughly reviewing the incident attack story, associated alerts, involved entities, and correlated signals to ensure accuracy and completeness.

• Ensure SecOps agents and automated workflows executed correctly without technical issues, verifying that investigations ran smoothly and results are reliable.

• Confirm the accuracy of incident verdicts byidentifyingfalse positives, incomplete investigations, or incorrect threat classifications.

• Perform deeper analysis whenrequired, including URL detonation or sandboxing, file analysis, and reviewing customer inventory and context to ensure findings areaccurateand relevant.

• Validate and apply Incident Management (IM) tags correctly, and approve,modify, or reject automated findings before escalation or response.

What you’llbring:

• Strong understanding of fundamental cybersecurity operationsandincident analysis.

• Familiaritywith SIEM and XDR platforms, preferably Microsoft Defender XDR,Sentinel SIEM and SOAR capabilities.

• Solid knowledge of common cyber threats and attack techniques based on MITRE ATT&CK®.

• Strong analytical thinking and attention to detail with the ability to validateand challenge automated findings.

• Clear, professionalwrittenand verbal communication skills.

• Relevant certification such as SC-200isdesirable.

What we’lloffer:

• Market competitive base paysand bi-yearlyperformance-based bonuses.

• Monthly allowances for health insurance, laptop, and internet.

• Paid time off for up to 20daysevery year plusall government holidays.

• Opportunity to work internationally from CyberMSI’slocations in the USA, UAE,and other locationsthrough intra-company assignments.

• Ongoingtraining on latest cybersecurityand AItechnologies.

• Reimbursements for relevant cybersecuritycertifications.