Information Security Analyst: Threat Detection & IR

Jobtailor; Atlanta (GA); On-site; USD 85,000 - 120,000; Full time

Job summary

Jobtailor is seeking a Security Monitoring and Incident Response specialist in Atlanta to monitor, analyze, and respond to security event data from host logs and network traffic. You will respond to critical alerts and drive incident response from detection through containment and recovery.

This role emphasizes developing detections, playbooks, and SOPs for emerging threats, while improving processes, tooling, and automation. Strong communication and collaboration with stakeholders are required.

Qualifications

• Minimum of 2 years in Security Monitoring and Incident Response.
• Experience with SIEM systems including configuration, tuning, optimization, and threat detection creation.
• Understanding of cloud security principles; Azure security and Defender for Azure.
• Familiarity with EDR tools such as CrowdStrike Falcon.
• Experience with DLP solutions (Trellix DLP).
• Knowledge of IAM principles and Microsoft Identity solutions.
• Experience with SOAR tools; Tines experience preferred.
• Proficiency in scripting languages such as Python or PowerShell.
• Ability to analyze complex data sets and identify potential threats.
• Experience using AI capabilities to improve investigation and response workflows.
• Excellent verbal and written communication skills.
• Commitment to ongoing learning and professional development in cybersecurity.
• Knowledge of compliance frameworks such as HIPAA, SOC2, ISO, or PCI-DSS.

Responsibilities

• Monitor, analyze, and respond to security event data from host logs, network traffic, and threat intelligence feeds.
• Respond to critical security alerts.
• Perform incident response from initial detection through containment, eradication, recovery, and post-incident activities.
• Develop new Threat Detections, Playbooks, and SOPs for emerging threats and trends.
• Evaluate and improve security processes, alerting, and tools.
• Identify opportunities for tuning, automation, and workflow streamlining to enhance efficiency and reduce risk.
• Collaborate with stakeholders and provide insightful security analysis.

Skills

Python

PowerShell

Data analysis

Communication

Incident response coordination

Automation

Education

Bachelor's degree or equivalent

Tools

SIEM systems

CrowdStrike Falcon

Trellix DLP

SOAR tools (Tines)

Microsoft Defender for Azure

Job description

Jobtailor is seeking a Security Monitoring and Incident Response specialist in Atlanta to monitor, analyze, and respond to security event data from host logs and network traffic. You will respond to critical alerts and drive incident response from detection through containment and recovery.

This role emphasizes developing detections, playbooks, and SOPs for emerging threats, while improving processes, tooling, and automation. Strong communication and collaboration with stakeholders are required.