Security Operations Analyst — Incident Response & SIEM

nuHarbor; Burlington (VT); On-site; USD 96,000 - 118,000; Full time

Benefits offered by this job

Competitive pay

Bonus opportunities

Paid time off

Comprehensive benefits

Job summary

nuHarbor is seeking a Security Analyst to join our Managed Services Security Operations team. You will monitor client environments, triage alerts, and conduct investigations from triage to disposition, escalating when necessary to Senior Analyst or Security Operations Manager.

The role requires independent work on difficult findings, adherence to SLAs, and proactive collaboration with internal teams and clients. You will document actions, support containment, and generate standard reports.

Qualifications

• Bachelor’s Degree or 2 years in a related field with certs.
• Two+ years’ experience with listed security tools.
• Ability to explain basic hardening methods.

Responsibilities

• Monitor client environments and triage security alerts.
• Conduct investigations including high-severity findings.
• Escalate to Senior Analyst or Manager as needed.
• Document tickets with evidence trail and disposition rationale.
• Operate SIEM/MDR/mXDR tooling per rules of engagement.
• Generate reports to nuHarbor standards.

Skills

Splunk ES

CrowdStrike Falcon

Microsoft Sentinel

Incident response

EDR/XDR familiarity

Security best practices

Network security

Written communication

Technical support

Threat monitoring

Education

Bachelor’s Degree

Security+ certification

CYSA+ certification

Tools

Splunk Enterprise Security

CrowdStrike Falcon

Microsoft Defender

Microsoft Defender for Endpoint

Job description

nuHarbor is seeking a Security Analyst to join our Managed Services Security Operations team. You will monitor client environments, triage alerts, and conduct investigations from triage to disposition, escalating when necessary to Senior Analyst or Security Operations Manager.

The role requires independent work on difficult findings, adherence to SLAs, and proactive collaboration with internal teams and clients. You will document actions, support containment, and generate standard reports.