Key Responsibilities

• Monitor and analyze security alerts generated from Microsoft Defender XDR, Microsoft Sentinel, and other security platforms.
• Investigate security incidents and coordinate containment, eradication, and recovery activities.
• Conduct threat hunting activities using MITRE ATT&CK methodologies and threat intelligence sources.
• Analyze endpoint, identity, cloud, email, and network telemetry to identify malicious activity.
• Perform phishing investigations and support user awareness initiatives.
• Develop and improve detection rules, analytics, and SOC monitoring use cases.
• Support digital forensic investigations and root cause analysis efforts.
• Collaborate with IT infrastructure, cloud, networking, and compliance teams during incident response activities.
• Contribute to SIEM tuning, automation, and continuous SOC process improvements.
• Create and maintain incident reports, operational metrics, and executive summaries.
• Participate in on-call and major incident response activities as required.

Required Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or related field.
• 3-5 years of cybersecurity, SOC, incident response, or threat detection experience.
• Hands-on experience with:
  • Microsoft Defender XDR
  • Microsoft Sentinel
  • Kusto Query Language (KQL)
  • SIEM technologies
  • Incident Response processes
  • Threat Hunting methodologies
• Knowledge of MITRE ATT&CK and Cyber Kill Chain frameworks.
• Experience investigating endpoint, identity, email, and cloud-based threats.
• Strong analytical and problem-solving skills.
• Excellent written and verbal communication skills.

Preferred Qualifications

• Experience securing Microsoft Azure environments.
• Knowledge of scripting or automation technologies (PowerShell, Python).
• Familiarity with SOAR solutions and security automation.
• Experience with digital forensics and malware analysis.

Preferred Certifications

• Microsoft Certified: Security Operations Analyst Associate (SC-200)
• Microsoft Certified: Azure Security Engineer Associate (AZ-500)
• CompTIA Security+
• CompTIA CySA+
• GIAC Certified Incident Handler (GCIH) or equivalent certifications.

What Success Looks Like

• Effective identification and response to cybersecurity incidents.
• Continuous improvement of detection and monitoring capabilities.
• Reduction of response times through automation and process optimization.
• Strong collaboration with global security and IT teams.
• Contribution to Bruker's overall cyber resilience strategy.

At Bruker, base salary is part of our total compensation. The estimated base salary range for this full-time position is between $65,250 and $116,000 and provides an opportunity to progress as you grow and develop within a role. The base salary for the role will depend on several job-related factors, including, but not limited to, education, training, experience, the geographic location of the successful candidate, skills, competencies, job-related knowledge and travel requirements for this position. Full-time employees may also be eligible for a performance-related incentive in addition to a full range of benefits including 401(k) with company match, an employee stock purchase plan, medical and dental plans, life insurance, short-term and long-term disability insurance, employee assistance program and paid time off including vacation, sick time and holidays, and more.

Bruker is an equal-opportunity employer. We evaluate qualified applicants without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, veteran status, and other legally protected characteristics.

#LI-DG1