Cyber Incident Response Specialist

Qnity is seeking a Security Operations Analyst to support enterprise cybersecurity operations through continuous monitoring, threat detection, investigation, and response activities.

Operating within a co-managed Security Operations model, this role partners with internal technology teams and managed security service providers (MSSPs) to investigate security events, support incident response, coordinate vulnerability remediation, and strengthen Qnity’s overall security posture.

Key Responsibilities

• Monitor, triage, and investigate security alerts and incidents.

• Analyze endpoint, network, cloud, identity, and email security events.

• Determine incident severity, impact, and appropriate response actions.

• Support incident containment, remediation, and recovery activities.

• Coordinate with MSSP partners to validate alerts and improve detection effectiveness.

• Maintain accurate incident documentation and reporting.

• Contribute to playbooks, procedures, and continuous improvement initiatives.

• Collaborate with Security Engineering, Infrastructure, IAM, Cloud, and business teams to reduce cyber risk.

Required Qualifications

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or equivalent experience.

• 3+ years experience in security operations, incident response, or cyber defense.

• Understanding of security monitoring, threat detection, and incident investigation.

• Knowledge of common cyber threats and attack techniques, including phishing, malware, and identity-based attacks.

• Familiarity with networking, operating systems, cloud platforms, identity management, and security tools.

• Strong analytical, problem-solving, and communication skills.

• Ability to manage competing priorities and make sound, risk-based decisions.

Preferred Qualifications

• Experience in a SOC, CIRT, MSSP, or enterprise security operations environment.

• Familiarity with SIEM, EDR/XDR, vulnerability management, and cloud security tools.

• Knowledge of Microsoft security technologies, Network security controls, email gateways controls

• Understanding of MITRE ATT&CK, threat intelligence, and incident response methodologies.

• Security certifications such as Security+, CySA+, GCIH, SC-200, or equivalent.

Leadership Behaviors

• Take ownership and accountability for investigations and assigned work.

• Escalate issues appropriately and communicate clearly.

• Collaborate effectively across technical and business teams.

• Continuously improve processes, documentation, and operational effectiveness.

• Demonstrate integrity, professionalism, and a commitment to protecting Qnity’s information assets.

#LI-LH1#LI-Hybrid