Security Operations Pro: Incident Response & Threat Hunting

Qnity; Wilmington (DE); On-site; USD 80,000 - 110,000; Full time

Job summary

Qnity is seeking a hands-on Security Operations Analyst to monitor, investigate, and respond to cyber threats across endpoints, identity, email, cloud, and networks. You will coordinate containment, remediation, and post-incident activities while collaborating with internal teams and MSSPs.

The role requires 3–5+ years in security operations, incident response, and familiarity with the Microsoft security ecosystem. Strong analytical skills and a proactive mindset are essential.

Qualifications

• Bachelor's degree in Cybersecurity, IT, CS, IS, or related field.
• 3 to 5+ years of relevant cybersecurity experience, including security operations and incident response.
• Experience with enterprise security technologies, particularly within the Microsoft security ecosystem.
• Working knowledge of MITRE ATT&CK framework.
• Experience in a co-managed SOC or MSSP operating model.
• Certifications such as CompTIA Security+, CySA+, Microsoft SC-200, GIAC GCIH, GCIA, or comparable certifications.

Responsibilities

• Monitor, triage, investigate, and document cybersecurity alerts and incidents.
• Analyze security events across endpoints, identity, email, network, cloud, applications, and data protection environments.
• Correlate security telemetry to determine scope, severity, and impact of suspicious activity.
• Support incident containment, remediation, recovery, and post-incident activities.
• Investigate phishing, business email compromise, malicious URLs and attachments, spoofing, compromised accounts, and other email-based threats.
• Coordinate email and DLP remediation activities with stakeholders.
• Perform targeted threat hunting using security telemetry and indicators of compromise.
• Develop and execute security queries to identify suspicious activity and affected users/systems.
• Review investigations escalated by MSSP and coordinate follow-up with Qnity teams.
• Identify opportunities to improve detection, investigations, playbooks, and security controls.
• Maintain accurate incident records and remediation documentation.

Skills

Cybersecurity experience

Incident response

SOC operations

MITRE ATT&CK

Microsoft security ecosystem

Co-managed SOC / MSSP

Certifications in cybersecurity

Education

Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Information Systems, related discipline, or equivalent practical experience

Job description

Qnity is seeking a hands-on Security Operations Analyst to monitor, investigate, and respond to cyber threats across endpoints, identity, email, cloud, and networks. You will coordinate containment, remediation, and post-incident activities while collaborating with internal teams and MSSPs.

The role requires 3–5+ years in security operations, incident response, and familiarity with the Microsoft security ecosystem. Strong analytical skills and a proactive mindset are essential.