Incident Response & Threat Hunter Analyst

Themesoft Inc; New York (NY); On-site; USD 90,000 - 130,000; Full time

Job summary

The role at Themesoft Inc focuses on incident response and threat management within the CrowdStrike Falcon ecosystem. You will handle frontline triage, evidence collection, and remediation coordination to protect data and IP across devices and networks.

You will also contribute to playbooks, analyze threat data, and collaborate with Infrastructure, Applications, and external vendors to strengthen security posture.

Qualifications

• Document evidence throughout the incident life cycle.
• Triage ticket queue: prioritization, assignment and disposition.
• Front-line triage and response with containment actions.
• Update SOAR playbooks and runbooks.
• Coordinate remediation after findings and review vendor controls.

Responsibilities

• Document evidence throughout the incident life cycle, conducting shift handovers, escalating security events to incident response, and providing support during cyber security incidents.
• Triage the ticket queue: prioritization, assignment and disposition of security incident tickets/events.
• Analyze threat data from multiple sources and build evidence-backed dispositions.
• Containment and remediation actions such as network isolation and blocking indicators of compromise.
• Maintain detailed case activity reports in the case management tool to verify process adherence.
• Contribute to creation and updating of SOAR playbooks and runbooks and general response documentation.
• Monitor detection and response programs to protect data and IP.
• Hunt for, detect, and respond to malicious activity on devices and networks.
• Use tools to automate detection and address future vulnerabilities.
• Coordinate remediation efforts after findings outline weaknesses.
• Work with security architecture to integrate TM tools into design reviews.
• Review third-party information security controls and document gaps for action.
• Document and enforce security improvements balancing risk with business operations.
• Foster cross-functional relationships with Infrastructure, Applications, and vendors.

Skills

Incident response

Threat hunting

SOAR playbooks

Threat data analysis

Tools

CrowdStrike Falcon

Job description

The role at Themesoft Inc focuses on incident response and threat management within the CrowdStrike Falcon ecosystem. You will handle frontline triage, evidence collection, and remediation coordination to protect data and IP across devices and networks.

You will also contribute to playbooks, analyze threat data, and collaborate with Infrastructure, Applications, and external vendors to strengthen security posture.