MxDR Security Analyst — Incident Response & Triage

nuHarbor; Atlanta (GA); On-site; USD 90,000 - 116,000; Full time

Benefits offered by this job

Competitive pay

Performance-based bonus

Generous paid time off

Comprehensive benefits

Job summary

nuHarbor is seeking a Security Analyst, MxDR, to manage the full lifecycle triage, investigation, and disposition of security alerts across client environments in a 24x7 delivery model.

You will document findings, escalate when needed, and support containment and remediation actions, while meeting defined SLAs. A strong SIEM/XDR background and US citizenship are required for this role with opportunities for growth and impact.

Qualifications

• Bachelor’s Degree and two (2) years of experience in cybersecurity, SOC, MDR or incident response.
• In lieu of a degree, two (2) years of experience in a related technology field and relevant industry certifications are required.
• Demonstrated experience with SIEM solutions, SOC operations, executing security event triaging and tuning.
• Experience working in SIEM/XDR tools including specifically Microsoft Sentinel or Defender.
• Proven ability to independently investigate and triage security events.
• Experience with security event analysis, log correlation, and threat detection.
• Experience with KQL or similar query languages.
• Familiarity with common endpoint security concepts.
• Demonstrated knowledge of security log, infrastructure design and networking fundamentals.
• Understanding of Identity and Access threats.
• Strong investigative mindset with attention to detail.
• Ability to anticipate problems, communicate them, and resolve appropriately.
• Demonstrated verbal and written communication skills for various internal and external audiences.
• Must be a citizen of the United States.

Responsibilities

• Review, analyze and investigate security alerts and incidents in Defender and Sentinel environments.
• Identify and assess indicators of compromise and attack across client environments.
• Drive incidents through full lifecycle: triage → investigation → disposition → escalation or closure.
• Document outcomes to support continuous improvement and quality review.
• Execute incident response procedures aligned to defined playbooks.
• Escalate incidents with documented evidence, impacted entities, and investigation summary.
• Support containment actions and remediation as needed.
• Partner with client SOC/IT teams for enrichment or remediation.
• Meet defined SLOs for alert triage start, investigation updates, and case closure.
• Balance accuracy vs. urgency in escalation decisions.
• Develop and improve analytics rules, queries, and detection logic.
• Document investigations and actions in service desk systems.

Skills

SIEM solutions

SOC operations

Microsoft Sentinel

Defender

KQL

Investigation

Documentation

Communication

Threat detection

Education

Bachelor’s Degree

Tools

Microsoft Sentinel

Microsoft Defender

XDR tools

Job description

nuHarbor is seeking a Security Analyst, MxDR, to manage the full lifecycle triage, investigation, and disposition of security alerts across client environments in a 24x7 delivery model.

You will document findings, escalate when needed, and support containment and remediation actions, while meeting defined SLAs. A strong SIEM/XDR background and US citizenship are required for this role with opportunities for growth and impact.