Senior Incident Response Analyst

What You Can Expect

We’re seeking a Senior Incident Response Analyst to join our cybersecurity incident response team. This is a hands-on technical role responsible for investigating and responding to cybersecurity incidents in a global follow-the-sun operating model, including participation in on-call and major incident rotations.

How You'll Create Impact

• Investigate security alerts and confirmed incidents; determine scope, impact, and root cause.
• Perform malware analysis and log analysis to support incident scoping and response.
• Conduct comprehensive forensic investigations across endpoints and network environments, correlating logs, telemetry, and artifacts to identify attacker activity.
• Execute containment and remediation actions in coordination with security and IT stakeholders.
• Document incidents thoroughly and contribute to shared knowledge bases and repeatable learnings.
• Participate in on-call and major incident rotations as part of the incident response coverage model.
• Support automation and orchestration lifecycle: build, maintain, and improve playbooks/workflows for enrichment, correlation, and initial response actions.
• Track and use operational metrics (e.g., alert quality trends, volume, time-to-triage/response) to prioritize tuning and automation improvements.
• Tune, suppress, and refine noisy detections; validate changes with evidence and ongoing monitoring.  
• Mentor and collaborate with other team members.

What Makes You Stand Out

• SIEM/SOAR: Experience investigating and improving detection/automation content.
• EDR/XDR: Experience investigating endpoint threats and using endpoint telemetry for containment/remediation.
• OS & Networking: Windows and Linux; TCP/IP, DNS (and related enterprise networking fundamentals).
• Scripting/Automation: Proficiency with at least one (Python, PowerShell, Bash) to support analysis and workflow automation.
• Cloud: Familiarity with at least one major cloud platform (AWS, Azure, or GCP).

Your Background

• 5–8+ years of experience in a SOC and/or incident response role.
• Strong analytical and investigation skills with demonstrated ability to handle complex incidents.
• Ability to communicate clearly and produce concise, defensible incident documentation.
• Preferred: GCIH, GCFA, CISSP, SIEM specific certifications 
• Nice to have: Microsoft SC-200, CEH, GSOC, GCIA, GCTI, Security+

Expected Compensation - $100,000-$125,000 base salary