Cybersecurity Incident Response Specialist

Overview

Geotab ® is a global leader in IoT and connected transportation and certified “Great Place to Work™.” We are a company of diverse and talented individuals who work together to help businesses grow and succeed, and increase the safety and sustainability of our communities.

Basis:
Permanent Full Time

Location:

Atlanta, Georgia

Geotab is seeking a Cybersecurity Incident Response Specialist who will be responsible for protecting Geotab's software, hardware, and supply chain by leading incident response efforts across government-compliant and commercial environments. If you love investigative security work, thrive in fast-moving environments, and are keen to join an industry leader — we would love to hear from you!

• Own incident response operations for Geotab's government compliance environments.
• Proactively monitor, triage, and lead response efforts for security incidents.
• Conduct log analysis across web applications and leverage tools including Elastic and Crowd Strike.
• During lower-incident periods, lead threat hunts and strategic IR project work to improve security posture.
• Participate in an on-call rotation with dedicated coverage for US-specific incidents.

• Proactively monitor, evaluate, and track systems and networks for breaches to Geotab's security, products, and customers.
• Identify security flaws and vulnerabilities and utilize metrics for evaluating risks (e.g., CVSS).
• Ensure that Geotab's compliance requirements are met (e.g., NIST 800-53 & NIST 800-171), with focus on FedRAMP and CONUS environments.
• Perform security audits, risk analysis, network forensics, and penetration testing to reduce attack surface.
• Perform malware analysis and reverse engineering to develop procedural responses.
• Establish security gap assessments, policies, procedures, playbooks, training, and tabletop testing.
• Establish protocols for communicating security incidents with customers, internal stakeholders, and law enforcement.
• Remediate security breaches in a timely manner and provide expert SME guidance to internal teams.

• Post-secondary diploma or degree in Computer Science, Engineering, or related field.
• 3–5 years of experience in an Incident Response or Security Operations role.
• Hands-on experience with Elastic, Crowd Strike, and SQL; scripting in Python, Power Shell, and Bash; familiarity with Splunk, QRadar, or other SIEM tools is a strong asset.
• Experience in GCP environments (primary); AWS, Azure, or Oracle cloud familiarity is an asset.
• CCSP certification desired; CISSP and SANS certifications are a plus — strong hands-on experience will be considered over certifications alone.
• Strong communication skills with the ability to work independently in a remote or hybrid environment (Atlanta or remote; hybrid if Atlanta-based).
• Willingness to participate in on-call incidents.

To be eligible, candidates must have continuously resided in the continental United States for at least three years immediately preceding their application. Successful applicants will be required to provide verifiable documentation of continuous lawful residency. Some exceptions apply to US citizens.

Ability to pass an enhanced background check, including a drug screening test (if applicable) and a credit check.

Please note: Geotab does not accept agency resumes and is not responsible for any fees related to unsolicited resumes. Please do not forward resumes to Geotab employees.

Geotab provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, sex, national origin, age, disability or genetics. Geotab complies with applicable state and local laws governing nondiscrimination in employment. Geotab expressly prohibits any form of workplace harassment or discrimination based on race, color, religion, gender, sexual orientation, gender identity or expression, national origin, age, genetic information, disability, or veteran status.

For more information about our EEO program or to file a complaint, please contact our EEO officer at

Geotab is committed to accommodating people with disabilities during the recruitment and assessment processes and when people are hired. If you require accommodation at any stage of the application process or want more information about our diversity and inclusion and accommodation policies, please contact us at

Geotab will not discriminate in compensation discussions. By submitting a job application to Geotab Inc. or its affiliates and subsidiaries, you acknowledge Geotab’s collection, use and disclosure of your personal data in accordance with our Privacy Policy.  to read our Privacy Notice.