MxDR Security Analyst - Evening Shift

nuHarbor; Chicago (IL); On-site; USD 90,000 - 116,000; Full time

Benefits offered by this job

Annual bonus program

Comprehensive benefits

Generous paid time off

Job summary

nuHarbor is seeking a Security Analyst, MxDR, to join our 24x7 MxDR delivery team. You will own full lifecycle triage, investigation, and disposition of security alerts across client environments, delivering defensible, evidence-based conclusions and clear documentation.

In this role you will analyze alerts in Defender and Sentinel, triage incidents, meet time objectives, and collaborate with client SOCs. A strong investigative mindset and clear communication are essential.

Qualifications

• Bachelor’s degree and 2 years of cybersecurity or incident response experience.
• Experience with SIEM solutions and SOC operations.
• Experience with Microsoft Sentinel or Defender.
• Ability to independently investigate and triage security events.
• Knowledge of security logs, networking, and threat detection.
• U.S. citizen is required.

Responsibilities

• Review and investigate security alerts and incidents in Defender and Sentinel environments.
• Drive incidents through full lifecycle: triage → investigation → disposition → escalation or closure.
• Accurately triage and classify alerts, minimizing false positives while documenting outcomes for continuous improvement.
• Support containment actions and collaborate with client SOC or IT teams as needed.

Skills

SIEM

SOC operations

Incident triage

Defender/Sentinel

KQL

Endpoint security

Security incidents

Education

Bachelor's Degree in Cybersecurity or related field

Tools

Microsoft Defender

Microsoft Sentinel

SIEM tools

Job description

nuHarbor is seeking a Security Analyst, MxDR, to join our 24x7 MxDR delivery team. You will own full lifecycle triage, investigation, and disposition of security alerts across client environments, delivering defensible, evidence-based conclusions and clear documentation.

In this role you will analyze alerts in Defender and Sentinel, triage incidents, meet time objectives, and collaborate with client SOCs. A strong investigative mindset and clear communication are essential.