Managed Detection and Response Analyst
亚克罗尼斯是网络保护的全球领导者，为生产性 MSP 提供人工智能驱动的保护，在一个统一的原生集成平台中，将运营管理，网络安全和数据保护结合起来。我们以保护，管理和自动化企业和生活所依赖的所有工作负载的使命推动，我们建立了行业唯一的一种全方位解决方案。我们正在寻找 MDR 分析师加入我们的数字世界保护任务.Acronis MDR 服务内的 EDR/XDR 事件调查和分类负责。这一角色重点关注对方活动的调查，执行和协助纠正，并提供明确的客户沟通，同时有助于持续改善服务。分析师将与高级团队成员以及人工智能工程团队密切合作，以增强自动化和集成 Agentic AI 的能力在 MDR 工作流程中。这是一个面向增长的角色，具有为许多领域贡献机会，包括主动威胁猎杀和先进事件反应。你会做什么？·研究即将到来的 EDR/XDR 事件，专注于精确分类和严重程度评估 · 执行像工作隔离等补救行动，遵循建立的游戏手册 · 文件调查步骤和维护完整的案例记录 · 与人工智能工程合作，测试并精炼自动化分类和响应流程 · 自有事件从检测到解决方案，如果需要资深人员的协助 ·支持文档开发和改进，自动化和事故相关逻辑 ·通过电子邮件和电话明确与客户沟通有关事件状况和建议 ·保持关于当前安全威胁和攻击者技术的信息 ·工作5天8小时时间办公室时间，周末覆盖范围随着轮换活动我们正在寻找谁 ·经验 SOC,MDR 或 IT 安全运营 · 了解 EDR/XDR 操作和安全事件工作流程 · 熟悉攻击者共同的 TTP 和 MITRE ATT&CK 框架 · Windows OS,Active Directory,Linux,网络知识 ·熟悉 Kibana 或手动审查等工具中的日志分析。·与安全工具 (EDR,SIEM,SOAR) 的经验以及对自动化技术的兴趣 ·能够跟踪结构化的过程并准确记录发现 ·增长思维 ·强大的沟通技能和注意力
查看英文原文
Acronis is a global leader in cyber protection, delivering AI-powered protection for productive MSPs in a single, natively integrated platform that unifies operations management, cybersecurity, and data protection. Driven by our mission to protect, manage and automate every workload that businesses and lives depend on, we’ve built the industry’s only all-in-one solution.
We are looking for an MDR Analyst to join our mission of protecting the digital world.
The MDR Analyst is responsible for investigating and triaging EDR/XDR incidents within the Acronis MDR service. This role focuses on investigating adversary activity, execution and aiding in remediation, and providing clear customer communication, while contributing to continuous service improvement.
The analyst will work closely with senior team members and the AI engineering team to enhance automation and integrate Agentic AI capabilities into the MDR workflow. This is a growth-oriented role, with opportunities to contribute to many areas, including proactive threat hunting and advanced incident response.
WHAT YOU'LL DO
- Investigateincoming EDR/XDR incidents, focusing on accurate triage and severity assessment
- Execute remediation actions such as workload isolation, following established playbooks
- Document investigation steps and maintain complete case records
- Collaborate with AI engineering to test and refine automated triage and response processes
- Ownthe incident from the detection to the resolution, with assistance from senior staff if required
- Support development and refinement ofdocumentation, automation, and incident correlation logic
- Communicate clearly with customers via email and phone about incident status and recommendations
- Stay informed about current security threats and attacker techniques
- Work 5-day/8-hour schedulein office hours, withrotationalweekend coverage
WHO WE’RE LOOKING FOR
- Experience in SOC, MDR, or IT security operations
- Strong understanding of EDR/XDR operations and security incident workflows
- Strong understanding of common attacker's TTPs and MITRE ATT&CK framework
- Knowledge of Windows OS, Active Directory, Linux, Networking
- Familiar with logs analysis in tools like Kibana or manual reviews.
- Experience working with security tools (EDR, SIEM, SOAR) and interest in automation technologies
- Ability to follow structured processes and accurately document findings
- Growth mindset
- Strong communication skills and attention to details
- Solid English written and verbal communication skills (B2 or higher)
*Please submit your resume and application in English
WHO WE ARE
A Swiss company founded in Singapore in 2003, Acronis offers over twenty years of innovation with 15 offices worldwide and more than 1800 employees in 50+ countries. Acronis Cyber Protect is available in 26 languages in 150 countries and is used by over 20,000 service providers to protect over 750,000 businesses.
Our corporate culture centers on innovation, accountability, and impact. We encourage our people to think boldly, challenge conventional approaches, and take ownership of outcomes. As a member of our global “A-Team,” you’ll operate in a high-growth, fast-paced environment where resilience, adaptability, and a commitment to continuous improvement drive success.
OUR INTERVIEW PRACTICES
To ensure a fair and genuine hiring process, candidates are expected to participate in interviews without the use of AI tools, automated prompts, or third-party assistance. Interviews are designed to assess individual skills, experience, and communication style, and we value authentic, real-time interaction.
Use of AI or external assistance during live interviews may result in disqualification. For roles where AI skills are being evaluated, permitted use of AI tools will be clearly communicated in advance. Candidates may be asked to disable virtual backgrounds or participate in in-person interviews. All employment offers are contingent upon successful completion of applicable criminal, education and identity background checks
Acronis is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, ancestry, color, marital status, national origin, physical or mental disability, medical condition, protected veteran status, race, religion, sex (including pregnancy), sexual orientation, gender identity or expression, or any other characteristic protected by applicable laws, regulations and ordinances.
Originally posted on Himalayas