Note: The job is a remote job and is open to candidates in USA. Robert Half is a specialized talent solutions and staffing firm that connects job seekers with employment opportunities. The company is seeking a Cybersecurity Incident Response Analyst to perform Level 2 and Level 3 security ticket triage, investigate and troubleshoot incidents, and support resolution across Windows, Mac, and Linux environments. The role also involves using Microsoft security tools, collaborating with vendors, and communicating with employees, executives, and business partners.
Responsibilities
- Handle **Level 2 and Level 3 security ticket triage**, investigating issues and seeing incidents through to resolution
- Investigate and troubleshoot security incidents using **Microsoft Defender for Endpoint** and **Microsoft Sentinel**
- Use **Kusto Query Language (KQL)** to query and investigate security events and data
- Leverage **PowerShell** to run queries and support investigation and troubleshooting activities
- Perform investigation work within **Microsoft Purview**, including reviewing **audit logs**
- Investigate endpoint security issues across **Windows, Mac, and Linux** environments
- Troubleshoot and support **incident response activities** from initial investigation through resolution
- Work with **third-party vendors** as needed to troubleshoot and resolve security-related issues
- Communicate directly with employees at all levels, including **executives and business partners**, to understand reported issues, explain security concerns, and ask questions to challenge or clarify what they are seeing
Skills
- 3-5 years of cybersecurity or incident response experience
- Hands-on experience with **Microsoft Defender for Endpoint**
- Hands-on experience with **Microsoft Sentinel**
- Experience writing and running **KQL queries**
- Experience using **PowerShell** for querying or security investigations
- Experience investigating **Microsoft Purview audit logs**
- Experience supporting endpoint security across **Windows, Mac, and Linux**
- Ability to troubleshoot security incidents and follow them through **resolution**
- Strong communication skills and the confidence to communicate directly with executives and business partners
- Quick learner with the ability to work effectively in a **close-knit, collaborative team environment**
- All applicants applying for U.S. job openings must be legally authorized to work in the United States
Benefits
- 100% Remote
- Free online training
- Medical, vision, dental, and life and disability insurance
- Eligible to enroll in the company 401(k) plan
Company Overview