Security Analyst: Incident Response & Threat Hunting

Kavaliro; Columbia (SC); On-site; USD 83,000 - 90,000; Full time

Benefits offered by this job

Equal Employment Opportunities

Job summary

Kavaliro is seeking a Security Analyst to monitor and respond to security events across SIEM, EDR, IDS/IPS, and threat intel sources. You will perform deep-dive analyses, validate incidents, and prepare detailed reports with root-cause and remediation guidance.

Required are 2+ years in security monitoring, MITRE ATT&CK experience, and dashboard/reporting skills. The role involves collaboration with engineering and support teams, with an emphasis on identifying threats and improving SOC processes.

Qualifications

• 2+ years of experience with security monitoring and incident response
• 2+ years of experience with MITRE ATT&CK framework
• 2+ years of experience with dashboard creation and reporting
• Associate’s degree in IT or information security; four years of relevant experience may substitute education

Responsibilities

• Continuously review and correlate security event data across SIEM, EDR, IDS/IPS, and threat intel sources to identify complex attack patterns and incidents
• Perform deep-dive analysis of suspicious activity, validate incidents, determine root cause and impact, and escalate to Tier 3 as needed
• Create detailed incident reports, timelines, and post-incident summaries; contribute to lessons learned and remediation recommendations
• Investigate user-reported phishing, malware, and policy violations; advise on containment and recovery actions
• Hone SOC playbooks and detection rules to reduce false positives and improve threat coverage

Skills

Security Monitoring & Incident

MITRE ATT&CK

Dashboard creation & reporting

Education

Associate’s degree in IT or Information Security

Tools

Palo Alto Cortex XSIAM/XDR

Linux

Firewalls & VPNs

Active Directory

Job description

Kavaliro is seeking a Security Analyst to monitor and respond to security events across SIEM, EDR, IDS/IPS, and threat intel sources. You will perform deep-dive analyses, validate incidents, and prepare detailed reports with root-cause and remediation guidance.

Required are 2+ years in security monitoring, MITRE ATT&CK experience, and dashboard/reporting skills. The role involves collaboration with engineering and support teams, with an emphasis on identifying threats and improving SOC processes.