> Markdown version of [/jobs/ext/2590779-purview-incident-response-analyst](https://www.wearedevelopers.com/jobs/ext/2590779-purview-incident-response-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Purview Incident Response Analyst

- **Company:** MatchPoint Solutions
- **Location:** Chicago, IL, United States
- **Experience:** Expert
- **Salary:** $114,400.0 - $124,800.0
- **Contract:** Temporary to permanent
- **Skills:** Microsoft Azure, Cloud Computing, Cloud Computing Security, Cyber Security, Databases, Information Leak Prevention, Data Security, Intrusion Detection and Prevention, Falcon Platform, Information Technology, Sumo Logic (Software), Security Orchestration, Automation & Response, Server Operating Systems & Platforms
- **Published:** August 30, 2026
- **Apply:** https://www.careerjet.com/jobad/use8c0eb3410df31f02f48a422abf34bf6

## About the Role

Minimum five years of cybersecurity experience and minimum eight years of information technology experience.
Bachelor's degree or equivalent in a technical discipline, or a corresponding educational background supported by professional security certifications relevant to the role.
Demonstrated experience leading complex security incident investigations and response activities involving data security, insider risk, information protection, or data loss prevention.
Experience leading, supporting, managing, and administering at least one security application, with the ability to work independently across broad security initiatives.
In depth knowledge of information security principles, threats, risks, controls, and network, application, systems, cloud, and data security architecture.
Experience documenting, designing, and implementing security controls across desktop, server, network, database, cloud, and application environments.
Experience with security posture and exposure management, threat detection, vulnerability identification and remediation, identity protection, security operations, and security orchestration, automation, and response capabilities.
Experience leading security projects and initiatives, with strong leadership, project management, communication, customer service, and organizational skills.
Experience supporting HIPAA, Payment Card Industry, National Institute of Standards and Technology, and related audit or compliance requirements.
One advanced, professional, or expert level security certification is preferred.
Tools and Technologies:
Microsoft Purview, including data loss prevention, insider risk, information protection, and incident investigation capabilities
Microsoft Azure and cloud security capabilities

## Description

The Purview Incident Response Analyst specializes in responding to data security, insider risk, and information protection incidents within Microsoft environments. The analyst uses Microsoft Purview, Microsoft Azure, CrowdStrike, Sumo Logic, and related security monitoring platforms to investigate suspicious activity, assess data exposure risks, and support remediation. This six month contract role partners with compliance, legal, cybersecurity, business, and application teams to protect sensitive data and support organizational security requirements. The role may include participation in a 24 hour on call support rotation.
Responsibilities:
Lead complex reviews, investigations, response, recovery, and remediation activities for data security, insider risk, and information protection incidents.
Use Microsoft Purview and related monitoring platforms to identify suspicious activity, analyze potential data exposure, preserve relevant evidence, and document investigation findings.
Architect, design, implement, and improve security technologies and processes in collaboration with security leadership, departmental colleagues, and business and application owners.
Manage, administer, monitor, and support two to three security applications, resolve operational issues, automate repeatable processes, and cross train team members.
Measure and report enterprise security capabilities using automated and manual tools.
Develop and maintain security policies, standards, standard operating procedures, security strategies, capability plans, and business case documents.
Perform security, risk, and impact reviews for new and existing systems before and after implementation.
Develop, maintain, audit, and enhance enterprise security controls across cloud, data protection, endpoint, identity, network, application, database, and server environments.
Respond to audits, assessments, and compliance requests, including work related to HIPAA, Payment Card Industry standards, National Institute of Standards and Technology guidance, and other applicable requirements.
Contribute to security awareness training and communications, mentor junior staff, and participate in an on call rotation as assigned.
Perform other duties as assigned.


## Related Videos

- [Crypto-secure Data Management with In-Database Blockchain](https://www.wearedevelopers.com/videos/632-crypto-secure-data-management-with-in-database-blockchain)
- [Checkmate: 5 Real Incidents That Can End a Software Company](https://www.wearedevelopers.com/videos/100126-checkmate-5-real-incidents-that-can-end-a-software-company)
- [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats)
- [Kubernetes and Microservices with Multi-Model Databases](https://www.wearedevelopers.com/videos/382-kubernetes-and-microservices-with-multi-model-databases)
- [Cyber Sleuth: Finding Hidden Connections in Cyber Data](https://www.wearedevelopers.com/videos/893-cyber-sleuth-finding-hidden-connections-in-cyber-data)
- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)

## Related Articles

- [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)
- [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again)
- [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks)