Junior AI Log Enrichment Analyst

Delven Labs

Remote · $60k – $80k / year · Full-time · Posted 4 weeks ago

This role is no longer accepting applications

Don't miss the next role like this

Create a free profile with your skills. We match you to new AI roles as they open, and companies hiring can contact you directly.

Create free profile, 2 minutes

Similar open roles you can apply to now:

See all open AI jobs

This role is no longer accepting applications

Don't miss the next role like this

Create a free profile with your skills. We match you to new AI roles as they open, and companies hiring can contact you directly.

Create free profile, 2 minutes

Similar open roles you can apply to now:

See all open AI jobs

About the role

You'll be the fourth person on a detection data team of seven, sitting between our threat researchers and the engineers who run the ingestion platform. Delven Labs processes around 4 billion security events a day for mid-market companies, and most of them arrive half-labelled: missing asset owners, stale geolocation, unknown process hashes. Your job is to make those events richer before our models ever see them. Expect to write enrichment jobs, check their output in SQL, and pair with a senior analyst twice a week while you learn how attackers actually show up in the data.

Responsibilities

You'll spend most of your time writing and testing enrichment steps that add context to raw security events
Track coverage metrics for each enrichment source and flag gaps before they hurt detection quality
Pair with threat researchers to turn their manual lookups into repeatable pipeline steps
Keep our enrichment catalogue documented so new detections can reuse existing fields

Requirements

Working knowledge of Python and pandas from coursework, internships or personal projects
Comfortable writing SQL joins and aggregations without hand-holding
Curiosity about how networks and endpoints get attacked
Any exposure to Kafka or streaming data is a bonus, not a must