Cyber Incident Response Specialist

Qnity Electronics•Wimington, DE

22h•Hybrid

About The Position

Qnity is seeking a Security Operations Analyst to support enterprise cybersecurity operations through continuous monitoring, threat detection, investigation, and response activities. Operating within a co-managed Security Operations model, this role partners with internal technology teams and managed security service providers (MSSPs) to investigate security events, support incident response, coordinate vulnerability remediation, and strengthen Qnity’s overall security posture.

Requirements

Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or equivalent experience.
3+ years experience in security operations, incident response, or cyber defense.
Understanding of security monitoring, threat detection, and incident investigation.
Knowledge of common cyber threats and attack techniques, including phishing, malware, and identity-based attacks.
Familiarity with networking, operating systems, cloud platforms, identity management, and security tools.
Strong analytical, problem-solving, and communication skills.
Ability to manage competing priorities and make sound, risk-based decisions.

Nice To Haves

Experience in a SOC, CIRT, MSSP, or enterprise security operations environment.
Familiarity with SIEM, EDR/XDR, vulnerability management, and cloud security tools.
Knowledge of Microsoft security technologies, Network security controls, email gateways controls
Understanding of MITRE ATT&CK, threat intelligence, and incident response methodologies.
Security certifications such as Security+, CySA+, GCIH, SC-200, or equivalent.

Responsibilities

Monitor, triage, and investigate security alerts and incidents.
Analyze endpoint, network, cloud, identity, and email security events.
Determine incident severity, impact, and appropriate response actions.
Support incident containment, remediation, and recovery activities.
Coordinate with MSSP partners to validate alerts and improve detection effectiveness.
Maintain accurate incident documentation and reporting.
Contribute to playbooks, procedures, and continuous improvement initiatives.
Collaborate with Security Engineering, Infrastructure, IAM, Cloud, and business teams to reduce cyber risk.