Incident Response Analyst II

Incident Response Engineer

Entry-level monitoring; triages basic alerts; supports investigations.

Conducts initial incident investigations, escalates confirmed threats, and updates run books.

Leads incident handling, coordinates cross-functional responses, and performs forensic analysis.

Oversees incident response strategy, threat hunting, red/blue teaming initiatives, and executive-level reporting.

Minimum of 3-5 years' experience in a command center, service center, or similar 24x7 operations center environment.

Critical Power:
Experience responding to failures in Uninterruptible Power Supplies (UPS), emergency generators, and Power Distribution Units (PDUs).

Cooling & HVAC:
Proven track record handling cooling loops, chillers, and Computer Room Air Conditioning (CRAC) units during thermal emergencies.

Monitoring Tools:
Hands-on experience triaging real-time alerts from Building Management Systems (BMS) and Data Center Infrastructure Management (DCIM) tools.

Standard Operating Procedures:
Following and executing Emergency Operating Procedures (EOPs) and Method of Procedure (MOP) documents.

Vendor Management:
Experience coordinating with external utility companies, fuel delivery vendors, and specialized equipment technicians under tight SLAs.

Experience in managing Data center enterprise incidents. (facility, noc, soc etc.)

Associate's degree in IT, or equivalent experience. 0–2 years in IT or Security Ops.

Bachelor's degree in Information Systems, or Computer Science. 2–4 years SOC/IR experience.

3–5 years of experience in incident response in data center environment.

Hands-on experience with Incident io, Grafana, Ring, JIRA, Teleport, Confluence.

Familiarity with log sources (Windows, Linux, firewalls, cloud logs)

Strong analytical, troubleshooting, and decision-making skills under pressure.

Familiarity with regulatory standards (e.g., SOC 2, HIPAA, ISO 27001, NIST).

Excellent written and verbal communication, including technical documentation.

Active learner, methodical, eager to follow procedures, dependable.

Analytical, responsive, detail-oriented, collaborative, capable of leading investigations.

Strategic, able to lead IR efforts, skilled at executive communication, mentor to junior analysts.

Visionary, able to design incident response strategy, align security with business risk, lead multi-stakeholder efforts.

Prolonged periods sitting at a desk and working on a computer.

Ability to use a keyboard, mouse, and other standard office equipment.

$98,040.00 - $ USD (Salary)

Astreya offers comprehensive benefits to all Regular, Full-Time Employees, including:

• Medical provided through UHC (PPO, HSA, Surest options) / Medical provided through Kaiser (HMO option only) for California employees only
• Dental provided through UHC
• Nationwide Vision provided by UHC
• Flexible Spending Account for Health & Dependent Care
• Pre-Tax Account for Commuter Benefit/Parking & Transit (location-specific)
• Continuing Education and Professional Development via various integrated platforms, e.g. Udemy and Coursera
• Corporate Wellness Program provided by Goomi Group
• Employee Assistance Program
• Wellness Days
• 401k Plan
• Basic and Supplemental Life Insurance
• Short Term & Long Term Disability
• Critical Illness, Critical Hospital, and Voluntary Accident Insurance
• Tuition Reimbursement (available 6 months after start date, capped)
• Paid Time Off (accrued and prorated, maximum of 120 hours annually)
• Paid Holidays
• Any other statutory leaves, paid time, or other ancillary benefits required under state and federal law