Senior Incident Response and Threat Management Analyst

Summary

Senior Incident Response And Threat Management Analyst

Lead the full lifecycle of cybersecurity incidents from detection to postincident review.

Conduct advanced threat analysis malware reverse engineering and forensic investigations.

Develop and maintain incident response playbooks and runbooks.

Hunt for threats proactively and identify indicators of compromise IOCs.

Collaborate with SOC analysts threat intelligence teams and IT operations.

Mentor junior analysts and provide technical guidance.

Present findings to executive leadership and stakeholders.

Contribute to detection engineering and security monitoring rules.

Secondary Technical Skills

Use Microsoft Sentinel and KQL for threat detection and analysis.

Support digital forensics and evidence collection.

Coordinate with Managed Security Service Providers.

Stay ahead of emerging threats vulnerabilities and attack techniques.

Soft Skills

Experience in incident analysis SOC operations or security architecture.

Solid understanding of Microsoft Sentinel and KQL.

Strong analytical and problemsolving skills.

Curiosity and drive to uncover answers.

Excellent communication skills technical and nontechnical.

Experience in one or more of Threat Intelligence Threat Hunting Detection Engineering Digital Forensics.

Familiarity with HTCPCP and RFC 2324 technologies.

Knowledge of NIST and MITRE ATTCK frameworks.

Exposure to Microsoft Defender for Identity and Purview.

Flexibility to respond during nights weekends or holidays.

Preferred Qualifications

Certifications CompTIA Security Network SANSGIAC GCIH GCED GCFE GNFA GCIA.

Experience with MSSPs.

Cloud security experience AWS Azure GCP and containerized environments.

Scripting skills in Python PowerShell or similar.

Qualifying Questions

Has the resource got experience on threat analysis.

Has the resource got experience in maintaining incident playbooks.

Experience on threat hunting.

Skills

Mandatory Skills : Threat Hunter Expert, Microsoft Copilot for Security, Threat Intel Platform or Feed.

Disclaimer: E-Solutions provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, gender, sexual orientation, gender identity or expression, national origin, age, disability, genetic information, marital status, amnesty, or status as a covered veteran in accordance with applicable federal, state and local laws. We especially invite women, minorities, veterans, and individuals with disabilities to apply.

Job Description

Senior Incident Response And Threat Management Analyst

Lead the full lifecycle of cybersecurity incidents from detection to postincident review.

Conduct advanced threat analysis malware reverse engineering and forensic investigations.

Develop and maintain incident response playbooks and runbooks.

Hunt for threats proactively and identify indicators of compromise IOCs.

Collaborate with SOC analysts threat intelligence teams and IT operations.

Mentor junior analysts and provide technical guidance.

Present findings to executive leadership and stakeholders.

Contribute to detection engineering and security monitoring rules.

Secondary Technical Skills

Use Microsoft Sentinel and KQL for threat detection and analysis.

Support digital forensics and evidence collection.

Coordinate with Managed Security Service Providers.

Stay ahead of emerging threats vulnerabilities and attack techniques.

Soft Skills

Experience in incident analysis SOC operations or security architecture.

Solid understanding of Microsoft Sentinel and KQL.

Strong analytical and problemsolving skills.

Curiosity and drive to uncover answers.

Excellent communication skills technical and nontechnical.

Experience in one or more of Threat Intelligence Threat Hunting Detection Engineering Digital Forensics.

Familiarity with HTCPCP and RFC 2324 technologies.

Knowledge of NIST and MITRE ATTCK frameworks.

Exposure to Microsoft Defender for Identity and Purview.

Flexibility to respond during nights weekends or holidays.

Preferred Qualifications

Certifications CompTIA Security Network SANSGIAC GCIH GCED GCFE GNFA GCIA.

Experience with MSSPs.

Cloud security experience AWS Azure GCP and containerized environments.

Scripting skills in Python PowerShell or similar.

Qualifying Questions

Has the resource got experience on threat analysis.

Has the resource got experience in maintaining incident playbooks.

Experience on threat hunting.

Skills

Mandatory Skills : Threat Hunter Expert, Microsoft Copilot for Security, Threat Intel Platform or Feed.

Disclaimer: E-Solutions provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, gender, sexual orientation, gender identity or expression, national origin, age, disability, genetic information, marital status, amnesty, or status as a covered veteran in accordance with applicable federal, state and local laws. We especially invite women, minorities, veterans, and individuals with disabilities to apply.