Job SummaryMathWorks has a hybrid work model that enables staff members to split their time between office and home. The hybrid model provides the advantage of having both in-person time with colleagues and flexible at-home life optimizations. Learn More: ;br>
Lead the investigation, containment, remediation, and review of complex security incidents affecting enterprise systems, cloud platforms, applications, endpoints, identities, networks, and SaaS services.
Serve as a senior security operations analyst responsible for detecting threats, validating security exposures, identifying control gaps, and reducing enterprise risk through investigation, engineering, automation, and collaboration with internal technical teams.
This role combines security operations, detection engineering, threat hunting, threat exposure validation, cloud security, application security, security engineering, and operational leadership. Responsibilities include helping lead multi-team investigations, improving monitoring and detection capabilities, developing operational processes, maintaining investigation runbooks, and providing clear technical guidance to both technical and nontechnical audiences.
The position requires independent judgment, strong analytical capabilities, and the ability to balance immediate operational priorities with longer-term improvements that strengthen organizational security capabilities. This position requires participation in on-call and operational rotations, as necessary.
MathWorks is on a hybrid schedule (3 days at the Natick, MA Headquarters, 2 days' work from home)MathWorks nurtures growth, appreciates inclusivity, encourages initiative, values teamwork, shares success, and rewards excellence.
Responsibilities - Lead security investigations, coordinate incident response, and drive containment, remediation, and post-incident reviews.
- Perform threat hunting, develop detections, enhance alerting logic, and validate threat exposures using intelligence and operational telemetry.
- Assess vulnerabilities, attack paths, security control gaps, and other technical exposures, prioritizing remediation based on risk.
- Develop and improve security tooling, automation, integrations, observability, dashboards, and investigation workflows.
- Maintain and enhance runbooks, playbooks, escalation procedures, response processes, and operational metrics.
- Provide technical leadership, security guidance, mentoring, project support, and stakeholder consultation across technology teams.
Minimum Qualifications- A bachelor's degree and 6 years of professional work experience (or a master's degree and 3 years of professional work experience, or a PhD degree, or equivalent experience) is required.
- Visa sponsorship will not be provided for this position.
- Candidates for this position must be authorized to work in the United States on a full-time basis for any employer without restriction.
Additional Qualifications - Bachelor's degree in Cybersecurity, Computer Science, Information Systems, Engineering, or a related field. Equivalent professional experience considered.
- Strong understanding of incident response methodologies, attack lifecycles, and adversary behaviors.
- Knowledge of common attacker techniques and frameworks, including MITRE ATT&CK.
- Strong understanding of cloud security, identity security, endpoint security, network security, application security, and SaaS security concepts.
- Ability to analyze incomplete, conflicting, or evolving information and make risk-based decisions.
- Excellent communication and documentation skills with the ability to explain technical findings to technical and business audiences.
- Strong project leadership, stakeholder coordination, and problem-solving skills.
