Security Operations Analyst — Incident Response & Monitoring

Socket.dev; Burlington (VT); On-site; USD 90,000 - 116,000; Full time

Benefits offered by this job

Performance bonus

Comprehensive benefits

Generous paid time off

Job summary

nuHarbor is seeking a Security Analyst to join the Managed Services Security Operations team. You will monitor client environments, triage alerts, and conduct investigations through to disposition and escalation within SLA.

The role requires independence for complex findings and collaboration with Senior Analysts and the Security Operations Manager when needed. You will document tickets, operate SIEM/mXDR tooling, and help improve detection and response across client environments while upholding

Qualifications

• Bachelor’s degree or equivalent experience in a related field.
• Minimum 2 years in a security-focused role or technical support.
• 2+ years with Splunk ES, CrowdStrike Falcon, or Microsoft Sentinel.
• Ability to explain basic hardening methods for network and detections.
• Knowledge of endpoint security best practices.
• Understanding of incident response concepts and procedures.

Responsibilities

• Monitor client environments and triage security alerts.
• Conduct investigations, escalate complex findings to seniors.
• Document tickets with clear evidence, disposition, and reasoning.
• Operate within SIEM, MDR, and mXDR tooling.
• Perform containment and response actions per client rules.

Skills

Incident response

Endpoint security

Network security

Communication

Education

Bachelor's degree in a related field

Tools

Splunk Enterprise Security

CrowdStrike Falcon

Microsoft Sentinel

Job description

nuHarbor is seeking a Security Analyst to join the Managed Services Security Operations team. You will monitor client environments, triage alerts, and conduct investigations through to disposition and escalation within SLA.

The role requires independence for complex findings and collaboration with Senior Analysts and the Security Operations Manager when needed. You will document tickets, operate SIEM/mXDR tooling, and help improve detection and response across client environments while upholding