Senior Incident Response & Coordination Analyst

Kforce Inc; Charlotte (NC); On-site; USD 90,000 - 120,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

HSA

FSA

401(k)

Life insurance

Disability insurance

Paid time off

Job summary

Kforce Inc in Charlotte, NC is seeking an Information Security Analyst III to join the Security Operations Center (SOC) within Threat Operations. You will own task management, coordination, and reporting for cybersecurity, trust & safety, and fraud incidents, ensuring timely and clear communication at every stage.

The role requires coordinating the full incident lifecycle—from containment to closure—while developing playbooks, producing regular incident reports, and guiding enhancements across

Qualifications

• Bachelor's degree or equivalent experience.
• 3+ years of incident coordination or security operations experience.
• CISM, GCIH, PMP, ITIL certifications are a plus.

Responsibilities

• Serve as the primary coordinator for major cybersecurity, trust & safety, and fraud incidents: organizing tasks, tracking progress, and maintaining clear communication across teams in ServiceNow SIR.
• Coordinate the full incident lifecycle: containment, eradication, recovery, and closure, ensuring containment is validated against the client’s control-testing standard before an incident is marked resolved.
• Develop, maintain, and enforce incident response playbooks and protocols with SOC capability champions across Insider Risk, Escalations, and DFIR.

Skills

Incident coordination

Security operations

Incident response procedures

ServiceNow SIR

Communication skills

Education

Bachelor's degree in Information Security or related field

Tools

ServiceNow

Job description

Kforce Inc in Charlotte, NC is seeking an Information Security Analyst III to join the Security Operations Center (SOC) within Threat Operations. You will own task management, coordination, and reporting for cybersecurity, trust & safety, and fraud incidents, ensuring timely and clear communication at every stage.

The role requires coordinating the full incident lifecycle—from containment to closure—while developing playbooks, producing regular incident reports, and guiding enhancements across