Cyber Analyst – AI SitRep Triage (Remote, India)

About the role

As a Cyber Analyst you will sit at the human‑in‑the‑loop checkpoint of our SitRep generation pipeline. Working remotely from India, you will review AI‑generated situation reports, decide whether detections are true or false positives, and help embed permanent fixes into the system.

Key responsibilities

• Review AI‑generated SitReps in TheHive case management queue, including low‑confidence and escalated items.
• Classify SitReps as False Positive, True Positive / Benign, or True Positive / Approved using client context, detection logic, raw telemetry and asset data.
• Investigate security events across network, endpoint, cloud and identity telemetry to validate AI findings.
• Approve high‑quality SitReps for client delivery; correct, annotate or escalate the rest.
• Perform root‑cause analysis for false positives or benign findings and contribute fixes to client notes, detection documentation, OCSF/payload mappings, and asset/vulnerability records.
• Author and edit versioned Markdown knowledge corpus that underpins SitRep generation.
• Propose, test and sign off changes to agent prompts, ensuring permanent improvements to the AI pipeline.

Required profile

• Experience analysing security events across network, endpoint, cloud and identity sources.
• Ability to assess AI‑generated findings and determine their validity.
• Strong attention to detail and a mindset for continuous improvement of detection logic.

Required skills

• TheHive case management platform
• OCSF (Open Cybersecurity Schema Framework) mappings
• Markdown documentation
• AI model evaluation and prompt engineering
• Network telemetry analysis
• Endpoint telemetry analysis
• Cloud telemetry analysis
• Identity telemetry analysis

What we offer

• Competitive salary
• Remote work with flexible schedule
• Opportunities for growth and development within a global team of 1,000+ professionals
• Supportive, inclusive work environment recognized as a Great Place to Work