Senior Incident Response and Threat Management Analyst

About the client:


Our client is a global technology consulting and digital solutions company that enables enterprises across industries to reimagine business models, accelerate innovation, and maximize growth by harnessing digital technologies. As a digital transformation partner to more than 700+ clients, our client brings extensive domain and technology expertise to help drive superior competitive differentiation, customer experiences, and business outcomes in a converging world. Powered by nearly 90,000 talented and entrepreneurial professionals across more than 30 countries.

Role--Senior Incident Response and Threat Management Analyst


Location--Charlotte NC( 5 days)

Lead the full lifecycle of cybersecurity incidentsfrom detection to postincident review


Conduct advanced threat analysis malware reverse engineering and forensic investigations


Develop and maintain incident response playbooks and runbooks


Hunt for threats proactively and identify indicators of compromise IOCs


Collaborate with SOC analysts threat intelligence teams and IT operations


Mentor junior analysts and provide technical guidance


Present findings to executive leadership and stakeholders


Contribute to detection engineering and security monitoring rules


Secondary Technical Skills


Use Microsoft Sentinel and KQL for threat detection and analysis


Support digital forensics and evidence collection


Coordinate with Managed Security Service Providers


Stay ahead of emerging threats vulnerabilities and attack techniques


Soft Skills


Experience in incident analysis SOC operations or security architecture


Solid understanding of Microsoft Sentinel and KQL


Strong analytical and problemsolving skills


Curiosity and drive to uncover answers


Excellent communication skillstechnical and nontechnical


Experience in one or more of Threat Intelligence Threat Hunting Detection Engineering Digital Forensics


Familiarity with HTCPCP and RFC 2324 technologies


Knowledge of NIST and MITRE ATTCK frameworks


Exposure to Microsoft Defender for Identity and Purview


Flexibility to respond during nights weekends or holidays


Preferred Qualifications


Certifications CompTIA Security Network SANSGIAC GCIH GCED GCFE GNFA GCIA


Experience with MSSPs


Cloud security experience AWS Azure GCP and containerized environments


Scripting skills in Python PowerShell or similar


Qualifying Questions


Has the resource got experience on threat analysis


Has the resource got experience in maintaining incident playbooks


Experience on threat hunting


Skills


Mandatory Skills : Threat Hunter Expert,Microsoft Copilot for Security,Threat Intel Platform or Feed.

Disclaimer: E-Solutions provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, gender, sexual orientation, gender identity or expression, national origin, age, disability, genetic information, marital status, amnesty, or status as a covered veteran in accordance with applicable federal, state and local laws. We especially invite women, minorities, veterans, and individuals with disabilities to apply. EEO/AA/M/F/Vet/Disability