Security Operations Analyst / Incident Response Specialist

Job role : Security Operations Analyst / Incident Response Specialist

Duration : 3 - 6 Contract to hire

Location : Remote

Overview:

• Greenfield opportunity to help build an internal Security Operations function.
• Organization will leverage an MSSP for Tier 1 and Tier 2 monitoring and support, but still requires an internal team to own security operations, investigations, and incident response activities.
• Hiring a Senior Security Operations / Incident Response Specialist.
• A SOC Manager is currently being hired, and this position will report directly to that individual.

Ideal Candidate Profile:

• 5-7+ years of hands-on experience in Security Operations and Incident Response.
• Strong Incident Response background with experience managing incidents throughout the entire lifecycle.
• Experience working within the Microsoft security ecosystem is highly preferred.
• Must be able to perform deeper investigations and analysis beyond basic alert triage.
• Not looking for a dedicated forensic analyst, but someone who can effectively support forensic investigations when needed.
• Strong IT fundamentals are critical, including networking, systems, identity, and infrastructure knowledge.
• Needs a proven track record of handling real-world security incidents with minimal ramp-up or training.
• Not seeking a junior-level candidate.

Key Technical Skills:

• Microsoft Defender Suite
• Defender for Endpoint
• Defender for Identity

• Defender for Servers
• Microsoft Sentinel (SIEM)
• Understanding how Microsoft security technologies integrate across the environment.
• Strong networking knowledge and ability to investigate network-related security events.
• Experience working alongside MSSPs in a co-managed security model.

Primary Responsibilities:

• Support and mature the internal Security Operations function. - They do have a SOC Manager joining the team soon as well
• Partner with the MSSP to validate findings, investigate incidents, and coordinate response activities.
• Conduct incident investigations and drive incidents through containment, remediation, and recovery.
• Analyze incidents beyond remediation to identify root cause and long-term corrective actions.
• Create and maintain incident documentation and response procedures.
• Apply critical thinking and sound judgment during investigations.