Incident Response Analyst (Mid-Senior Level)

Quick USA Inc.; Plano (TX); Hybrid; USD 130,000 - 150,000; Full time

Job summary

Quick USA Inc. is seeking an experienced Incident Response Analyst (Mid-Senior) to join its collaborative team. You will handle critical cyber incidents, perform digital forensics across Windows, Linux, macOS, and mobile, and drive threat hunting and intelligence initiatives.

You will contribute to SOPs and training, deliver clear incident communications, and work in a hybrid Plano, TX environment with on-call rotations. A strong background in NIST and security frameworks is required.

Qualifications

• 3–5 years hands-on incident response and digital forensics.
• Experience acting as Incident Commander in high-pressure incidents.
• Strong Windows, Linux and macOS internals knowledge.
• Cloud security incident response experience.
• Familiarity with NIST, HIPAA, ISO, OWASP standards.
• Proficient with DFIR tools and automation scripting.

Responsibilities

• Lead incident response activities across full lifecycle per NIST.
• Coordinate with SOC and security teams during active incidents.
• Perform digital forensics on diverse devices (Windows, Linux, macOS, mobile).
• Prepare forensic reports and executive updates during incidents.
• Contribute to threat intelligence, hunting, and playbooks.
• Participate in on-call rotation for 24/7 coverage.

Skills

Incident response

Digital forensics

Threat hunting

Cloud security incident response

Automation scripting (Python/PowerShop

Education

Bachelor's degree in Cybersecurity/IT/CS

Tools

Autopsy

The Sleuth Kit

Volatility

Magnet AXIOM

FTK

TRRAC Labs tooling

Job description

Incident Response Analyst (Mid-Senior Level)

Summary

Seeking a skilled and experienced Incident Response Analyst to join an IT company that develops IT solutions for the manufacturing sector, collaborative cybersecurity incident response team. In this role, you will combine technical expertise in digital forensics and incident response with proactive threat intelligence and hunting activities. You will respond to critical security incidents across the ecosystem, conduct comprehensive forensic investigations, and collaborate closely with the 24/7 SOC and other cybersecurity teams. When not actively responding to incidents, you will contribute to threat hunting, cyber threat intelligence, tooling improvements, and the development of SOPs and training materials—helping to elevate the entire team's capabilities.

Essential Duties

• Conduct comprehensive incident response activities following the NIST Cybersecurity Framework across all phases: Initial Detection, Analysis & Validation, Containment, Eradication, Recovery, and Post-Incident Activity.
• Respond to cyber incidents impacting corporate environments, manufacturing plants, third-parties, dealerships, and RSOC Customers.
• Perform digital forensic investigations including collection, processing, and analysis of forensic evidence from diverse devices (Windows, Linux, macOS, mobile).
• Maintain an "Always Be Timelining" (ABT) approach, continuously updating incident timelines as findings are discovered.
• Support proactive, reactive, and exploratory threat hunting activities across the ecosystem.
• Analyze emerging cyber threats, attacker TTPs, and track threat actors/groups to anticipate and mitigate potential attacks.
• Collaborate closely with the 24/7 SOC, Threat Detection Engineering, Vulnerability Management, and Insider Risk Management teams.
• Prepare and deliver forensic reports, incident communications, and executive updates during active incidents.
• Participate in weekly on-call rotation schedule for 24/7 incident response coverage.
• Conduct malware analysis (behavioral and static) using TRRAC Labs' dynamic analysis capabilities.
• Help develop, refine, and maintain incident response playbooks, SOPs, and training materials to improve team effectiveness.
• Participate in quarterly tabletop exercises to test incident response workflows and controls.
• Stay current on emerging threats, attacker techniques, and industry best practices.

Working Hours / Working style

09:00 - 18:00 (40hrs/week)

Monday to Friday

Hybrid

Working Location

Plano, TX

Salary / Benefit

$130K-$150K (Contract to Hire)

Holidays

Saturday, Sunday and Company holiday.

Qualifications

• Minimum of 3-5 years of hands-on experience in incident response and digital forensics.
• Proven ability to act as Incident Commander within a team setting during high-pressure incidents.
• Strong technical expertise in Windows, Linux, and macOS internals related to monitoring and threat detection.
• Experience with cloud security incident response and threat mitigation.
• Skilled in malware analysis (behavioral and static) and basic cryptanalysis.
• Familiarity with security frameworks and compliance standards (NIST, HIPAA, ISO, OWASP, etc.).
• Proficient with DFIR tools such as Autopsy, The Sleuth Kit, Volatility, Magnet Axiom, FTK, and others.
• Competent in scripting languages like Python, PowerShell, and Bash for automation and analysis.
• Excellent communication skills with the ability to collaborate effectively across technical teams and stakeholders.

Preferred

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related field (preferred or equivalent experience)
• Experience in enterprise, manufacturing, or software industries.
• Familiarity with SOAR platforms and security automation.
• Prior experience contributing to or improving incident response programs in a team environment.