Senior Information Security Analyst: Threat Hunting & IR

Phase2 Technology; Houston (TX); On-site; USD 120,000 - 170,000; Full time

Benefits offered by this job

Medical insurance plans

Dental insurance

Vision insurance

Life insurance

Job summary

Norton Rose Fulbright US LLP is seeking a Senior Information Security Analyst to join the global SOC. You will lead security monitoring, incident response, and proactive threat hunting across endpoints, cloud, identity, email and network telemetry.

The role emphasizes detection engineering, automation, and governance with senior mentorship across regions. The ideal candidate has 5+ years in security operations and hands-on expertise with Microsoft 365 Defender, Microsoft Sentinel, SIEM, and

Qualifications

• Bachelor's degree or equivalent IT/InfoSec experience.
• At least 5 years in security operations or related IT security.
• Proven ability to adapt to evolving threats and information.
• Expertise in Microsoft 365 Defender and Microsoft Sentinel.
• Strong knowledge of firewalls, IDS/IPS, EDR, SIEM and NIST incident response.
• Experience with endpoint security, DLP, and cloud security solutions.
• ServiceNow experience preferred.

Responsibilities

• Operate and manage security incidents to SLA guidelines.
• Triage and investigate alerts across endpoints, cloud, identity, email and network telemetry.
• Lead structured incident response with containment, eradication and recovery.
• Design and tune detection rules and map to MITRE ATT&CK.
• Develop SOAR playbooks to streamline response and automate tasks.

Skills

Microsoft 365 Defender

Microsoft Sentinel

SIEM

EDR

Cloud security

Incident response

ServiceNow

Education

Bachelor's degree or higher

Tools

Sigma

KQL

SOAR

Zscaler

Mimecast

Proofpoint

Cisco

Job description

Norton Rose Fulbright US LLP is seeking a Senior Information Security Analyst to join the global SOC. You will lead security monitoring, incident response, and proactive threat hunting across endpoints, cloud, identity, email and network telemetry.

The role emphasizes detection engineering, automation, and governance with senior mentorship across regions. The ideal candidate has 5+ years in security operations and hands-on expertise with Microsoft 365 Defender, Microsoft Sentinel, SIEM, and