Lead complex security investigations and incident response within the SOC, mentor analysts, and drive technical improvements. This role combines advanced threat analysis, client communication, and operational excellence to protect clients in a remote environment.
Full description
Cybersecurity for the public good
At nuHarbor, we help organizations navigate an increasingly complex cybersecurity landscape with confidence. By combining expert guidance, innovative technology, and trusted partnerships, we make security stronger, more effective, and easier to understand. We're looking for talented individuals who are passionate about solving meaningful challenges, helping clients succeed, and continuously improving alongside a team that values curiosity, collaboration, and impact.
The Opportunity
As a Senior Security Analyst, you'll serve as a senior technical contributor within nuHarbor's Security Operations Center (SOC). You'll lead complex investigations, guide incident response efforts, mentor fellow analysts, and help elevate the quality of our security operations through technical expertise and continuous improvement.
This role combines advanced threat analysis, client communication, technical leadership, and operational excellence. You'll be trusted to independently tackle the most challenging security problems while helping shape the growth and effectiveness of the team around you.
What Success Looks Like
In this role, you will:
Live by nuHarbor's core values: Help Clients Win, Always Improve, and Protect the House
Lead investigations from initial alert through root cause analysis, attack chain reconstruction, and final client reporting
Correlate data across SIEM, EDR, identity, and security telemetry sources to identify threats and uncover risks that automated tooling may miss
Independently pursue complex, high-priority, or ambiguous investigations with minimal direction
Support Security Analysts with alert triage, classification, escalation, and incident response activities
Identify security gaps and provide actionable recommendations aligned to client risk and business objectives
Communicate proactively with leadership regarding active threats, escalations, and emerging concerns
Facilitate client-facing discussions, including incident reviews, threat briefings, and security consultations
Produce high-quality documentation that clearly communicates findings, evidence, analyst reasoning, and client impact
Stay current on emerging threats, attacker tactics, vulnerabilities, and industry trends
Support the onboarding and operational success of new managed security clients
Mentor and train analysts on investigation methodology, documentation standards, and client communication best practices
Review analyst escalations and ensure investigative completeness and quality prior to client delivery
Contribute to automation initiatives that improve analyst efficiency and reduce operational noise
Partner with Detection Engineering teams to improve alert fidelity, tuning, and threat detection effectiveness
Develop recommendations that help clients mature their cybersecurity programs and security operations capabilities
Coordinate with clients and internal stakeholders throughout incident response and post-incident activities
Your Foundation
We're looking for someone who brings these minimum qualifications:
Bachelor’s Degree and five (5) years of experience. Experience should be in a cybersecurity field and should include relevant industry certifications.
In lieu of a degree, two (2) years of experience in a related technology field and relevant industry certifications are required.
Demonstrated experience with SOC operations, executing security event triaging and tuning.
Demonstrated experience writing runbooks and support procedures.
Demonstrated experience executing Monitoring and Response across multiple phases, containment, eradication, and recovery, in a SOC or MSSP environment.
Demonstrated experience with security event triaging and threat hunting executed through both a SIEM and EDR toolset.
Hands on experience with at least two of the following Endpoint Detection and Response (EDR) and Security Orchestration Automation and Response solutions.
CrowdStrike
Microsoft Defender
Microsoft Sentinel
Splunk Enterprise Security
Demonstrated experience with scripting in at least one language (Python, PowerShell, or equivalent) in a manner that supports automation solutions.
Excellent written and verbal communication skills.
Previous experience in technical support or security-focused role.
Willing and able to work Sunday - Thursday, 8:30am - 5:00pm.
Must be authorized to work within the United States.
Stand out With
You may stand out if you have experience with:
7+ years of progressive responsibility within SOC, MDR, MSSP, or incident response environments
Industry certifications such as CISSP, GCIH, GCFA, CEH, or similar
Presenting technical findings and strategic recommendations to executive stakeholders
Technical writing, reporting, and client-facing communications
SOAR platforms and automated response workflows
Linux, macOS, and Windows operating systems, including command-line and system administration experience
Memory forensics, disk forensics, and malware analysis
Static and dynamic malware analysis techniques
Translating complex technical findings into business-focused narratives
Data analysis techniques such as anomaly detection, clustering, and normalization
General systems administration and infrastructure experience
Applying the MITRE ATT&CK framework during investigations, reporting, and threat analysis
Experience across multiple cybersecurity disciplines including threat detection, incident response, penetration testing, security engineering, or information assurance
Why nuHarbor?
At nuHarbor, you'll find more than a job - you'll find a team committed to helping each other grow, solve meaningful problems, and make a measurable impact.
You can expect:
A collaborative, high-performing team environment
Leaders who are invested in your success and development
Meaningful work that helps organizations protect critical services and missions
The encouragement to bring your authentic self to work every day
Competitive pay, performance-based bonus opportunities, generous paid time off, and comprehensive benefits
Compensation
This position has an anticipated base salary range of $110,000–$135,000 annually, plus eligibility for nuHarbor's annual bonus program with a target opportunity of 10%.
Actual compensation is based on factors including experience, skills, certifications, and geographic location.
Join Us
At nuHarbor, we believe great security starts with great people. We're looking for curious problem-solvers, trusted advisors, and continuous learners who are passionate about helping clients win.
If you're ready to make an impact while growing alongside a team that values people as much as technology, we'd love to hear from you.
AAP/EEO Statement
The Equal Employment Opportunity Policy of nuHarbor is to provide a fair and equal employment opportunity for all associates and job applicants regardless of race, color, religion, national origin, gender, sexual orientation, age, marital status or disability. nuHarbor hires and promotes individuals solely based on their qualifications for the job to be filled.
nuHarbor believes that employees should be provided with a working environment which enables each associate to be productive and to work to the best of his or her ability. We do not condone or tolerate an atmosphere of intimidation or harassment based on race, color, religion, national origin, gender, sexual orientation, age, marital status, or disability. We expect and require the cooperation of all employees in maintaining a discrimination and harassment-free atmosphere.
Company information
nuHarbor provides cybersecurity services that help organizations strengthen security operations and reduce cyber risk. Its specialties include compliance, security advisory, penetration testing, vulnerability management, managed detection and response, threat intelligence, and managed security services. The company serves government, higher education, healthcare, essential services, finance, and enterprise organizations nationwide.
