Security Operations AnalystAbout the RoleQnity is seeking a
Security Operations Analyst to support the monitoring, investigation, and response to cybersecurity threats across the enterprise. This hands-on role will investigate security events across endpoint, identity, email, cloud, network, and data protection environments and coordinate appropriate containment and remediation activities.
The analyst will work closely with internal technology teams and managed security service providers to investigate incidents, improve security monitoring, and help protect Qnity's users, systems, and information.
Key Responsibilities- Monitor, triage, investigate, and document cybersecurity alerts and incidents.
- Analyze security events across endpoints, identity, email, network, cloud, applications, and data protection environments.
- Correlate security telemetry to determine the scope, severity, and potential impact of suspicious activity.
- Support incident containment, remediation, recovery, and post-incident activities.
- Investigate phishing, business email compromise, malicious URLs and attachments, spoofing, compromised accounts, and other email-based threats.
- Coordinate email and DLP remediation activities with appropriate technical, business, Legal, Privacy, or other stakeholders.
- Perform targeted threat hunting using available security telemetry and indicators of compromise.
- Develop and execute security queries to identify suspicious activity and determine potentially affected users, accounts, endpoints, and systems.
- Review and validate investigations escalated by managed security service providers and coordinate follow-up actions with Qnity teams.
- Identify opportunities to improve detection effectiveness, investigation processes, playbooks, and security controls.
- Maintain accurate incident records, investigation findings, remediation activities, and operational documentation.
Preferred Qualifications- Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Information Systems, related discipline, or equivalent practical experience.
- 3 to 5+ years of relevant cybersecurity experience, including security operations, incident response, SOC operations.
- Experience with enterprise security technologies is preferred, particularly within the Microsoft security ecosystem
- Working within a co-managed SOC or MSSP operating model.
- Working Knowledge of MITRE ATT&CK framework.
- Relevant certifications such as CompTIA Security+, CySA+, Microsoft SC-200, GIAC GCIH, GCIA, or comparable certifications.
What Success Looks LikeThe successful candidate is a hands-on security professional who demonstrates strong analytical judgment, takes ownership of investigations through resolution or escalation, collaborates effectively across technical and business teams, and continually looks for opportunities to improve Qnity's detection and response capabilities.
#LI-LH1
#LI-Hybrid
Join our Talent Community to stay connected with us!
Qnity offers a comprehensive pay and benefits package. To learn more visit the Compensation and Benefits page.
We use Artificial Intelligence (AI) to enhance our recruitment process. 
