Senior Incident Response Leader — Microsoft Security

Quorum Cyber; Texas; On-site; USD 140,000 - 230,000; Full time

Job summary

Quorum Cyber in the United States (Texas) seeks a Senior Incident Response Consultant to lead complex investigations, applying advanced forensics and threat analysis across Windows, Linux, macOS, and cloud environments. You will work with the SOC, MDR, Threat Intelligence teams and guide customers through containment, recovery, and strategic improvements.

As a Microsoft-first security partner, you will apply deep knowledge of Defender, Sentinel, Entra, Azure, and Microsoft 365 to incidents,

Qualifications

• Lead complex incident investigations across diverse technologies and customer situations.
• Perform host, network, and memory forensics across Windows, Linux, macOS and cloud artefacts.
• Identify attacker tools, TTPs, and map findings to threat actor behaviours.
• Analyse logs, network traffic, disk images and artefacts to determine attacker intent and impact.
• Ensure evidence collection follows chain-of-custody standards and best practice.
• Maintain situational awareness of evolving threats and threat actor behaviours.
• Interact with customer stakeholders, legal teams, and executive leadership during incidents.
• Use lessons learned to improve detection, escalation, containment, and recovery processes.

Responsibilities

• Act as a senior technical point of contact for customers during significant security incidents.
• Provide specialist Incident Response support to MSS and MDR customers when escalation is needed.
• Help customers maximise Microsoft Defender, Sentinel, Entra, Azure, and Microsoft 365 capabilities.
• Provide consultative advice linking technical threats to business risk.
• Deliver Incident Response Readiness Assessments and cyber exercises.
• Mentor junior IR team members and contribute to capability development.

Skills

Advanced forensic analysis

Memory forensics

Network traffic analysis

Threat hunting

Windows/Linux/macOS forensics

Microsoft security telemetry

AI/Automation in IR

Tools

EDR platforms

SIEM platforms

Microsoft Defender

Sentinel

Entra

Azure

Microsoft 365

Job description

Quorum Cyber in the United States (Texas) seeks a Senior Incident Response Consultant to lead complex investigations, applying advanced forensics and threat analysis across Windows, Linux, macOS, and cloud environments. You will work with the SOC, MDR, Threat Intelligence teams and guide customers through containment, recovery, and strategic improvements.

As a Microsoft-first security partner, you will apply deep knowledge of Defender, Sentinel, Entra, Azure, and Microsoft 365 to incidents,