Incident Response Analyst — SOC & Threat Hunting Pro

Thrive; United States; Remote; USD 70,000 - 100,000; Full time

Job summary

Thrive is seeking an Incident Response Analyst to join a growing Security Operations Center. The role focuses on monitoring, detecting, and responding to cybersecurity incidents, while improving client security postures with defined processes.

You will investigate intrusions, differentiate false positives, and drive incident resolution across 400+ clients. The successful candidate will develop playbooks, contribute to threat intelligence, and work with engineering teams to enhance detection

Qualifications

• Strong understanding of security best practices and incident response.
• Hands-on experience with SIEM, IDS/IPS, EDR and forensic tools.
• Experience in incident handling, threat hunting and playbooks.

Responsibilities

• Monitor security events across multiple sources and SOC platforms.
• Lead incident response and threat hunting for high priority incidents.
• Analyze security incidents and determine remediation steps.
• Develop and maintain incident response playbooks and runbooks.
• Collaborate with cross-functional teams and participate in tabletop exercises.
• Stay updated on threats and advise clients on protective measures.

Skills

SIEM

TCP/IP

IDS/IPS

EDR

Windows

Linux

Malware analysis

Network forensics

Tools

Forensic tools

Job description

Thrive is seeking an Incident Response Analyst to join a growing Security Operations Center. The role focuses on monitoring, detecting, and responding to cybersecurity incidents, while improving client security postures with defined processes.

You will investigate intrusions, differentiate false positives, and drive incident resolution across 400+ clients. The successful candidate will develop playbooks, contribute to threat intelligence, and work with engineering teams to enhance detection