# Cyber Defense Senior Analyst Remote from[USA](https://jobicy.com/job-region/usa.md)Annual salary Undisclosed Salary information is not provided for this position. Check our [Salary Directory](https://jobicy.com/salaries.md) to estimate the average compensation for similar roles.Department [Cybersecurity](https://jobicy.com/categories/cybersecurity.md) Employment type Full Time, Job posted16 Jun 2026Apply before16 Jul 2026Experience level Senior Views / Applies 722 / 32 [About company](https://jobicy.com/company/experian.md) * Share About [Experian](https://jobicy.com/company/experian.md) Experian unlocks the power of data to create opportunities for consumers, businesses and society. [Information Technology & Services](https://jobicy.com/company-category/information-technology-services.md) * 1980 Actively Hiring Verified job posting This job post has been [manually reviewed](https://jobicy.com/tools/help-center/employee/how-does-jobicy-verify-the-legitimacy-of-remote-job-listings.md) for authenticity and compliance. ### AI Summary Experian is seeking a Cyber Defense Senior Analyst to join its global 24x7 security operations team within the Cyber Fusion Center. The role involves monitoring, triaging, and responding to security events using tools like SIEM and EDR, with responsibilities including incident response lifecycle management and collaboration with external teams. Candidates need 3+ years of SOC experience and knowledge of frameworks like MITRE ATT&CK. This position offers an opportunity to enhance security operations and contribute to improving playbooks and use cases. The role reports to the Director of Cyber Defense Security Operations and operates on a Wednesday-Saturday schedule. ### Role DNA Job Complexity Easy Hard Pace & Pressure Relaxed Fast-paced Autonomy Level Guided Full Ownership Communication Load Independent Highly Collaborative AI Insight The role requires 3+ years of experience in a SOC or incident response, deep knowledge of cybersecurity frameworks, and the ability to perform in-depth analysis and response, which indicates a high level of difficulty. ### Salary Analysis Median Highly Competitive $115,000US Market $90k – 140k 0 $154k AI Insight The offered salary is not specified, but based on market data for a Cyber Defense Senior Analyst in the US, the median is estimated at $115,000. This is competitive for a senior level role in cybersecurity, though actual compensation may vary based on location and experience. ### Core Skills Required [SIEM](https://jobicy.com/jobs?search_keywords=SIEM.md) [EDR](https://jobicy.com/jobs?search_keywords=EDR.md) [Incident Response](https://jobicy.com/jobs?search_keywords=Incident+Response.md) [MITRE ATT&CK](https://jobicy.com/jobs?search_keywords=MITRE+ATTCK.md) [Cyber Kill Chain](https://jobicy.com/jobs?search_keywords=Cyber+Kill+Chain.md) [Security Operations](https://jobicy.com/jobs?search_keywords=Security+Operations.md) [Threat Analysis](https://jobicy.com/jobs?search_keywords=Threat+Analysis.md) [Vulnerability Management](https://jobicy.com/jobs?search_keywords=Vulnerability+Management.md) [Forensics](https://jobicy.com/jobs?search_keywords=Forensics.md) [Scripting](https://jobicy.com/jobs?search_keywords=Scripting.md) ### Cover Letter Sample Dear Hiring Manager, I am excited to apply for the Cyber Defense Senior Analyst position at Experian. With over 4 years of experience in security operations and incident response, I possess a strong understanding of the MITRE ATT&CK framework and Cyber Kill Chain. My background includes managing complex security incidents and collaborating with cross-functional teams to enhance security posture. In my previous role at [Previous Company], I successfully reduced response times by 30% through improved playbook automation. I am adept at using SIEM and EDR tools to triage and escalate threats effectively. I am eager to bring my expertise to Experian's global security team and contribute to protecting critical data assets. Thank you for considering my application. Sincerely, [Your Name] Copy ### Sample Interview Questions Describe your experience with the incident response lifecycle. How do you approach containment and eradication?I follow the NIST incident response framework: preparation, detection and analysis, containment, eradication, and recovery. For containment, I prioritize isolation of affected systems to prevent lateral movement. Eradication involves removing malicious artifacts and patching vulnerabilities. I document every step to ensure lessons learned are captured.How do you stay updated on the latest cyber threats and attack techniques?I regularly follow threat intelligence feeds like AlienVault OTX, attend webinars, and participate in cybersecurity communities. I also practice through platforms like Hack The Box and review CISA alerts to understand emerging threats.Can you explain a time you had to escalate an incident to a higher-level team? What was the outcome?In a previous role, I detected anomalous outbound traffic suggesting data exfiltration. I escalated to the incident response team, who confirmed a compromised endpoint. We contained the breach and mitigated further damage. My timely escalation prevented data loss.What SIEM tools have you used, and how do you tune use cases to reduce false positives?I have experience with Splunk and ArcSight. To reduce false positives, I analyze historical alerts, adjust correlation rules based on baseline behavior, and collaborate with threat hunters to validate rule effectiveness. Regular tuning sessions are essential.How do you handle high-pressure situations during a major security incident?I stay calm and follow established playbooks. Clear communication with stakeholders is critical. I prioritize containment to minimize impact and delegate tasks to team members. After resolution, we conduct a post-mortem to improve processes. ## Company Description Experian is a global data and technology company, powering opportunities for people and businesses around the world. We help to redefine lending practices, uncover and prevent fraud, simplify healthcare, create digital marketing solutions, and gain deeper insights into the automotive market, all using our unique combination of data, analytics and software. We also assist millions of people to realize their financial goals and help them to save time and money. We operate across a range of markets, from financial services to healthcare, automotive, agrifinance, insurance, and many more industry segments. We invest in people and new advanced technologies to unlock the power of data and to innovate. A FTSE 100 Index company listed on the London Stock Exchange (EXPN), we have a team of 23,300 people across 32 countries. Our corporate headquarters are in Dublin, Ireland. Learn more at [experianplc.com](http://experianplc.com). ## Job Description This role operates in a 10×4 Wednesday – Saturday weekly schedule as part of a 24×7 global monitoring function. The frontline team provides global 24×7 security operations and monitoring for cybersecurity events impacting Experian, and is a division of Experian’s Cyber Fusion Center (CFC), which is organized under the Experian Global Security Office (EGSO). As a Cyber Defense Senior Analyst, you will perform in-depth analysis, triage, and response to security threats by following documented policies, processes, and playbooks to meet Service Level Objectives (SLOs). This role is critical in ensuring the handling of potential threats and plays a part in improving security operations. You will report to the Director of Cyber Defense Security Operations. You’ll have the opportunity to: * Execute daily security operations by monitoring, triaging, and conducting response activities for security events and alerts associated with cyber threats, intrusions, and compromises. * Analyze events using security tooling and logging, such as SIEM, EDR, and assess the potential risk/severity level of cyber threats. Escalate higher-risk events to dedicated incident response and management teams in the CFC, according to established processes. * Collaborate with external teams for incident resolution and escalations, driving incident handling. * Notify team Lead(s) of concerns related to operations, such as anomalous changes in metrics, notable open incidents, quality concerns, or observed risks; support with resolution if appropriate. * Manage and complete assigned caseload throughout the incident response lifecycle, including analysis, containment, eradication, recovery, and lessons learned; maintain standards of quality to resolve events. * Maintain all case documentation, including notes, analysis findings, containment steps, and cause for each assigned security incident. * Perform incident updates or make contact with end-users promptly and document them, and complete case hand-off processes, such as completing/verifying shift logs. * Apply subject matter expertise in security operations processes to help improve relevant playbooks, Standard Operating Procedures (SOPs), and training materials. * Assist the team Leads and management on use case development by suggesting enhancements or tuning of use cases to improve the security posture of Experian. * Participate in paid overtime when operational needs may require additional support. ## Qualifications * 3+ years of information security experience working within a Security Operations Center or Cyber Security Incident Response Team. * Bachelor’s Degree in Computer Science, Computer Engineering, Information Systems, Information Security, or a related field. 6+ years of experience working within a Security Operations Center, Incident Response Team, law enforcement, and/or military experience may be accepted in lieu of this requirement. * Demonstrate working knowledge of the Incident Response Life Cycle, MITRE ATT&CK Framework, Cyber Kill Chain, and other cybersecurity frameworks. * Demonstrated knowledge of common intrusion methods and cyber-attack tactics, techniques, and procedures (TTPs), as well as common industry practices to investigate and respond to threats, including phishing, malware, network attacks, suspicious activity, and data security incidents. * Demonstrated proficiency in determining appropriate methods to contain, eradicate, and recover from a variety of security incidents. Provide recommendations to prevent incidents from recurring. * Possesses an understanding of common Operating Systems (Windows, Linux, Mac OS), Networking (Firewalls, Proxies, NetFlow, etc.), Cloud Infrastructure (AWS, Azure, GCP), and Security Technologies (Anti-Virus, Intrusion Prevention, Web Application Firewalls, etc.) * Ability to review and interpret device and application logs from a variety of sources (e.g., Firewalls, Proxies, Web Servers, System Logs, Splunk, Packet Captures, etc.) to identify root cause and determine next steps for containment, eradication, and recovery. * Experience with common Incident Response and Security Monitoring applications such as SIEM (e.g., Qradar, Splunk), EDR (e.g., FireEye HX, CrowdStrike Falcon, Microsoft Defender, etc.); experience with Security Orchestration, Automation, and Response (SOAR) technologies such as Palo Alto XSOAR and Google Secops (Chronicle) are a plus. * Continuously build advanced cybersecurity expertise across cloud security (Azure/AWS), incident response, threat detection, system and network forensics, SIEM/monitoring tools, vulnerability management, malware analysis, and scripting/automation. * One or more professional, currently-held certifications related to Digital Forensics, Incident Response, or Ethical Hacking highly preferred (e.g., GCIH, GMON, GCED, GSOC, CEH, GCFE, GCFA, CFCE, ENCE). * Bonus: Information security management certifications (CISSP, CISM) or vendor-specific certifications. ## Additional Information Benefits/Perks: * Great compensation package and bonus plan. * Core benefits including medical, dental, vision, and matching 401K. * Flexible work environment, ability to work remote, hybrid or in-office. * Flexible time off including volunteer time off, vacation, sick and 12-paid holidays. * Explore all our exciting benefits here: [https://yourexperianbenefits.com/cand-index.html.](https://yourexperianbenefits.com/cand-index.html) At Experian, our people and culture set us apart. We’re committed to creating an environment where everyone feels they belong and can excel. From inclusion and authenticity to work/life balance, development, wellness, collaboration, and recognition, we focus on what matters. Our people-first approach has earned us global recognition: World’s Best Workplaces™ 2024 (Fortune Top 25), Great Place To Work™ 2025 in 26 countries, and Glassdoor Best Places to Work 2024, among others. Want to see what life at Experian is really like? Explore Experian Life on social or visit our careers site. Our compensation reflects the cost of labor across several U.S. geographic markets. The base pay range for this position is listed above. Within this range, individual pay is determined by work location and additional factors such as job-related skills, experience, and education. You will be also eligible for a variable pay opportunity. Experian is proud to be an Equal Opportunity Employer for all groups protected under applicable federal, state and local law, including protected veterans and individuals with disabilities. If you have a disability or special need that requires accommodation, please let us know at the earliest opportunity. #LI-Remote This is a remote position. Show more [Apply now >](https://jobicy.com/jobs/146651-cyber-defense-senior-analyst.md) > Annual salary information is not provided for this position. Explore salary ranges for similar roles in our [Salary Directory ›](https://jobicy.com/salaries.md) * ![Upload CV](data:image/svg+xml;base64,PHN2ZyB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciIHdpZHRoPSI2NSIgaGVpZ2h0PSI2NSIgZmlsbD0ibm9uZSIgeG1sbnM6dj0iaHR0cHM6Ly92ZWN0YS5pby9uYW5vIj48ZyBjbGlwLXBhdGg9InVybCgjQSkiPjxwYXRoIGQ9Ik0wIDBINjVWNjVIMFYwWiIgZmlsbD0iIzAyOWFlYiIvPjxnIGZpbGw9IiNmZmYiIHN0cm9rZT0iI2ZmZiIgc3Ryb2tlLXdpZHRoPSIyIj48cGF0aCBkPSJNMzMuMDQ5IDE1LjQ1NGExLjQzIDEuNDMgMCAwIDAtMi4wOTcgMGwtNy41NzkgOC4xNDdhMS4zOCAxLjM4IDAgMCAwIC4wOSAxLjk3MyAxLjQ0IDEuNDQgMCAwIDAgMi4wMDgtLjA4OGw1LjEwOS01LjQ5MnYyMC42MWExLjQxIDEuNDEgMCAwIDAgMS40MjEgMS4zOTdjLjc4NSAwIDEuNDIxLS42MjUgMS40MjEtMS4zOTd2LTIwLjYxbDUuMTA5IDUuNDkyYTEuNDQgMS40NCAwIDAgMCAyLjAwOC4wODggMS4zOCAxLjM4IDAgMCAwIC4wOS0xLjk3M2wtNy41NzktOC4xNDZ6TTE2Ljc2OSAzOC40YzAtLjc3My0uNjItMS40LTEuMzg1LTEuNFMxNCAzNy42MjcgMTQgMzguNHYuMTAybC4yMTUgNi4yMjljLjIyMyAxLjY4LjcwMSAzLjA5NSAxLjgxMyA0LjIxOHMyLjUxIDEuNjA3IDQuMTcyIDEuODMzYzEuNi4yMTggMy42MzYuMjE4IDYuMTYuMjE4aDExLjI4bDYuMTYtLjIxOGMxLjY2Mi0uMjI2IDMuMDYxLS43MDkgNC4xNzItMS44MzNzMS41ODktMi41MzggMS44MTMtNC4yMThDNTAgNDMuMTEzIDUwIDQxLjA1NSA1MCAzOC41MDNWMzguNGMwLS43NzMtLjYyLTEuNC0xLjM4NS0xLjRzLTEuMzg1LjYyNy0xLjM4NSAxLjRsLS4xOSA1Ljk1OGMtLjE4MiAxLjM3LS41MTUgMi4wOTUtMS4wMjYgMi42MTJzLTEuMjI4Ljg1My0yLjU4MyAxLjAzOGMtMS4zOTUuMTktMy4yNDMuMTkzLTUuODkzLjE5M0gyNi40NjJjLTIuNjUgMC00LjQ5OC0uMDAzLTUuODkzLS4xOTMtMS4zNTUtLjE4NC0yLjA3Mi0uNTIxLTIuNTgzLTEuMDM4cy0uODQ0LTEuMjQyLTEuMDI2LTIuNjEyYy0uMTg3LTEuNDEtLjE5MS0zLjI3OS0uMTkxLTUuOTU4eiIvPjwvZz48L2c+PGRlZnM+PGNsaXBQYXRoIGlkPSJBIj48cGF0aCBmaWxsPSIjZmZmIiBkPSJNMCAwaDY1djY1SDB6Ii8+PC9jbGlwUGF0aD48L2RlZnM+PC9zdmc+) ### Upload your resume now To unlock remote work opportunities and be discovered by global employers. This job listing has been manually reviewed by the Jobicy Trust & Safety Team for compliance with our posting guidelines, including verification of the company's legitimacy, accuracy of job details, clarity of remote work policy, and absence of misleading or fraudulent content. ## How to apply ## See a few more Similar Cybersecurity remote jobs * ![Liberty Mutual logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2021/08/a0f68d769896c0f098621799a6396382.jpeg) Liberty Mutual ### [Assistant Director or Director, Global Cyber Insurance Strategy & Alignment](https://jobicy.com/jobs/148623-assistant-director-or-director-global-cyber-insurance-strategy-alignment.md) Description Liberty Mutual Insurance is seeking a dynamic and highly motivated Assistant Director or Director to join our Global Cyber Insurance Strategy & Alignment team. This multifaceted role blends program… ![USA flag](https://cloud.jobicy.com/nyc4-cold/img/round-flags/us.svg) US•Full TimeJul 3* ![ERNI logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2026/07/e3fa52100780-221.webp) ERNI ### [Cybersecurity Analyst (Entry Level)](https://jobicy.com/jobs/148516-cybersecurity-analyst-entry-level.md) ERNI is a fast-growing Software Development company headquartered and founded in Switzerland in 1994, with more than 800 employees. We are highly specialized in IT & software engineering to enable and… ![Philippines flag](https://cloud.jobicy.com/nyc4-cold/img/round-flags/ph.svg) PH•Full TimeJul 3* ![Smartsheet logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/8b6103bd-221.jpg) Smartsheet ### [Senior Security Engineer II, Application Security (Remote Eligible)](https://jobicy.com/jobs/147873-senior-security-engineer-ii-application-security-remote-eligible.md) For over 20 years, Smartsheet has empowered teams to manage work seamlessly and scale solutions smarter. Now, in our most ambitious chapter yet, we are uniting human teams with AI… ![USA flag](https://cloud.jobicy.com/nyc4-cold/img/round-flags/us.svg) US•Full TimeUSD 175k-245k/year* ![Vercel logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/a6aded72-221.png) Vercel ### [Security Software Engineer, IAM](https://jobicy.com/jobs/147750-security-software-engineer-iam.md) About Vercel: Vercel is the agentic infrastructure company. We free people and agents to ship what’s next. For more than a decade, Vercel has shaped how the web is built…. ![USA flag](https://cloud.jobicy.com/nyc4-cold/img/round-flags/us.svg) US•Full TimeUSD 208k-312k/year* ![Synthesia logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2026/06/c69aad11-221.webp) Synthesia ### [Application Security Engineering Manager](https://jobicy.com/jobs/146803-application-security-engineering-manager.md) Synthesia is the world’s leading AI video platform for business, used by over 90% of the Fortune 100. Founded in 2017, the company is headquartered in London, with offices and… ![UK flag](https://cloud.jobicy.com/nyc4-cold/img/round-flags/gb.svg) ![Europe flag](https://cloud.jobicy.com/nyc4-cold/img/round-flags/eu.svg) GB, EU•Full TimeJun 16* ![Nebius logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2026/06/d90c0566-221.webp) Nebius ### [Application Security Engineer](https://jobicy.com/jobs/146769-application-security-engineer-2.md) About Nebius: Nebius is leading a new era in cloud infrastructure for the global AI economy. We are building a full-stack AI cloud platform that supports developers and enterprises from… ![UK flag](https://cloud.jobicy.com/nyc4-cold/img/round-flags/gb.svg) ![Europe flag](https://cloud.jobicy.com/nyc4-cold/img/round-flags/eu.svg) GB, EU +3 more, DE, NL, CZ•Full TimeEUR 75k-240k/year* ![Fivetran logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/3b8e4532-221-1.jpg) Fivetran ### [Lead Sales Engineering Specialist – Security](https://jobicy.com/jobs/146498-lead-sales-engineering-specialist-security.md) From Fivetran’s founding until now, our mission has remained the same: to make access to data as simple and reliable as electricity. With Fivetran, customer data arrives in their warehouses,… ![EMEA flag](https://cloud.jobicy.com/nyc4-cold/img/round-flags/emea.svg) ![Ireland flag](https://cloud.jobicy.com/nyc4-cold/img/round-flags/ie.svg) EMEA, IE•Full TimeJun 14* ![Truelogic logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/e7ae6cb6-221-1.png) Truelogic ### [Senior SecOps Automation Engineer – Consumer FinTech](https://jobicy.com/jobs/146284-senior-secops-automation-engineer-consumer-fintech.md) About TruelogicAt Truelogic we are a leading provider of nearshore staff augmentation services headquartered in New York. For over two decades, we’ve been delivering top-tier technology solutions to companies of… ![LATAM flag](https://cloud.jobicy.com/nyc4-cold/img/round-flags/latam.svg) LATAM•Full TimeJun 12* ![Pair Team logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/105c0d0c-221.png) Pair Team ### [Senior Security Engineer](https://jobicy.com/jobs/146199-senior-security-engineer.md) About Pair TeamPair Team is building a new kind of healthcare system across Medicaid, Medicare, and public assistance programs: one that recognizes that access to housing, nutritious food, and reliable… ![USA flag](https://cloud.jobicy.com/nyc4-cold/img/round-flags/us.svg) US•Full TimeUSD 170k-190k/year* ![ECS logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/e346542a-221.png) ECS ### [Computer Security System Specialist](https://jobicy.com/jobs/146111-computer-security-system-specialist.md) ECS is seeking an experienced Computer Security System Specialist to work remotely providing cybersecurity support for the work performed under this contract for NIH NIAID Enabling and Advancing Technologies (NEAT). All other tasks… ![USA flag](https://cloud.jobicy.com/nyc4-cold/img/round-flags/us.svg) US•Full TimeJun 10 [More Jobs](https://jobicy.com/jobs.md)