Cybersecurity Incident Response Analyst

Robert Half
Seattle, WA, United States
4 days ago
Apply on www.dice.com
Prepare application

Role details

Contract type
Temporary contract
Employment type
Full-time (> 32 hours)
Experience level
Experienced
Experience required
3 years minimum
Working hours
Regular working hours
Job source

Tech stack

Microsoft Windows Macintosh Computers Audit Trail Cyber Security Linux Linux System Administration Windows PowerShell Kusto Query Language Azure Security Center Microsoft Sentinel

Job description

Robert Half is seeking a Cybersecurity Incident Response Analyst to join their close-knit security team. This role will focus on Level 2 and Level 3 ticket triage, incident investigation, and troubleshooting security incidents through resolution across Windows, Mac, and Linux environments. Apply today!, * Handle Level 2 and Level 3 security ticket triage, investigating issues and seeing incidents through to resolution.

  • Investigate and troubleshoot security incidents using Microsoft Defender for Endpoint and Microsoft Sentinel.
  • Use Kusto Query Language (KQL) to query and investigate security events and data.
  • Leverage PowerShell to run queries and support investigation and troubleshooting activities.
  • Perform investigation work within Microsoft Purview, including reviewing audit logs.
  • Investigate endpoint security issues across Windows, Mac, and Linux environments.
  • Troubleshoot and support incident response activities from initial investigation through resolution.
  • Work with third-party vendors as needed to troubleshoot and resolve security-related issues.
  • Communicate directly with employees at all levels, including executives and business partners, to understand reported issues, explain security concerns, and ask questions to challenge or clarify what they are seeing.

Requirements

  • 3-5 years of cybersecurity or incident response experience.
  • Hands-on experience with Microsoft Defender for Endpoint.
  • Hands-on experience with Microsoft Sentinel.
  • Experience writing and running KQL queries.
  • Experience using PowerShell for querying or security investigations.
  • Experience investigating Microsoft Purview audit logs.
  • Experience supporting endpoint security across Windows, Mac, and Linux.
  • Ability to troubleshoot security incidents and follow them through resolution.
  • Strong communication skills and the confidence to communicate directly with executives and business partners.
  • Quick learner with the ability to work effectively in a close-knit, collaborative team environment., All applicants applying for U.S. job openings must be legally authorized to work in the United States. Benefits are available to contract/temporary professionals, including medical, vision, dental, and life and disability insurance. Hired contract/temporary professionals are also eligible to enroll in our company 401(k) plan. Visit roberthalf.gobenefits.net for more information.

Benefits & conditions

Robert Half works to put you in the best position to succeed. We provide access to top jobs, competitive compensation and benefits, and free online training. Stay on top of every opportunity - whenever you choose - even on the go. Download the Robert Half app and get 1-tap apply, notifications of AI-matched jobs, and much more.

About the company

Robert Half is the world’s first and largest specialized talent solutions firm that connects highly qualified job seekers to opportunities at great companies. We offer contract, temporary and permanent placement solutions for finance and accounting, technology, marketing and creative, legal, and administrative and customer support roles.

Apply for this position

This job is hosted externally. Click below to view the full posting and apply.

Apply on www.dice.com
Prepare application

Good distractions

Talks and stories from around this role — technically off-topic, practically not.

52 sec

Running persistent Linux environments directly on Windows

Ben Breard Ben Breard · World Congress 2025

3:56 min

Leveraging GitOps for AI auditing and instant rollbacks

Jaroslaw Gajewski Jaroslaw Gajewski · World Congress 2026 Europe

4:11 min

Introduction to cloud-native application developer security

Micah Silverman · World Congress 2022

3:53 min

Applying software development methodologies to incident response

Tobias Dunn-Krahn · LIVE

3:55 min

Demonstrating .NET installation on Debian and Azure Linux

Silvano Coriani Silvano Coriani · Europe 2026 Virtual

1:45 min

Transitioning from software development to security roles

Stefania Chaplin · World Congress 2022

Videos

See all

Related articles

See all