Microsoft-Centric Incident Response Specialist (AI-Enabled)

Quorum Cyber; United States; On-site; USD 90,000 - 130,000; Full time

Benefits offered by this job

World class benefits

Job summary

Quorum Cyber is seeking an Incident Response Consultant to support investigations, perform forensic analysis, and collaborate with SOC/MDR teams across Microsoft-centric environments. You will help guide customers during investigations, leverage Defender/Sentinel/Azure/M365 capabilities, and contribute to AI-enabled incident response initiatives.

The role emphasizes strong analytical skills, clear communication, and cross-functional teamwork to improve detection, containment, and recovery for

Qualifications

• Experience conducting host, network, and memory forensics across multiple platforms.
• Proficiency with EDR and SIEM platforms for investigations and threat hunting.
• Strong knowledge of Microsoft security technologies and telemetry in Defender/Sentinel/Azure.
• Excellent written and verbal communication for customer guidance and incident reporting.

Responsibilities

• Lead investigations into cyber security incidents with defined workstreams.
• Perform host, network, and memory forensics across Windows, Linux, macOS, and cloud environments.
• Analyse logs, traffic, images, and artefacts to determine attacker intent and impact.
• Coordinate with SOC, MDR, Threat Intelligence and other teams during incidents.
• Guide customers on Microsoft Defender, Sentinel, Entra, Azure and Microsoft 365 during investigations and recovery.
• Contribute to automation and AI-enabled incident response workflows.

Skills

Forensic analysis

Memory forensics

Network traffic analysis

Threat hunting

Microsoft security technologies

EDR & SIEM

Incident response

Communication

Analytical mindset

Job description

Quorum Cyber is seeking an Incident Response Consultant to support investigations, perform forensic analysis, and collaborate with SOC/MDR teams across Microsoft-centric environments. You will help guide customers during investigations, leverage Defender/Sentinel/Azure/M365 capabilities, and contribute to AI-enabled incident response initiatives.

The role emphasizes strong analytical skills, clear communication, and cross-functional teamwork to improve detection, containment, and recovery for