Cyber Incident Response Specialist

Key Responsibilities

• Monitor, triage, and investigate security alerts and incidents.
• Analyze endpoint, network, cloud, identity, and email security events.
• Determine incident severity, impact, and appropriate response actions.
• Support incident containment, remediation, and recovery activities.
• Collaborate with MSSP partners to validate alerts and improve detection effectiveness.
• Maintain accurate incident documentation and reporting.
• Contribute to playbooks, procedures, and continuous improvement initiatives.
• Collaborate with Security Engineering, Infrastructure, IAM, Cloud, and business teams to reduce cyber risk.

Required Qualifications

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or equivalent experience.
• 3+ years experience in security operations, incident response, or cyber defense.
• Understanding of security monitoring, threat detection, and incident investigation.
• Knowledge of common cyber threats and attack techniques, including phishing, malware, and identity-based attacks.
• Familiarity with networking, operating systems, cloud platforms, identity management, and security tools.
• Strong analytical, problem-solving, and communication skills.
• Ability to manage competing priorities and make sound, risk-based decisions.

Preferred Qualifications

• Experience in a SOC, CIRT, MSSP, or enterprise security operations environment.
• Familiarity with SIEM, EDR/XDR, vulnerability management, and cloud security tools.
• Knowledge of Microsoft security technologies, Network security controls, email gateways controls.
• Understanding of MITRE ATT&CK, threat intelligence, and incident response methodologies.
• Security certifications such as Security+, CySA+, GCIH, SC-200, or equivalent.

Leadership Behaviors

• Take ownership and accountability for investigations and assigned work.
• Escalate issues appropriately and communicate clearly.
• Collaborate effectively across technical and business teams.
• Continuously improve processes, documentation, and operational effectiveness.
• Demonstrate integrity, professionalism, and a commitment to protecting Qnity’s information assets.