Incident Response Analyst II

Scope

Entry-level monitoring; triages basic alerts; supports investigations. Conducts initial incident investigations, escalates confirmed threats, and updates run books. Leads incident handling, coordinates cross‑functional responses, and performs forensic analysis. Oversees incident response strategy, threat hunting, red/blue teaming initiatives, and executive‑level reporting.

• Minimum of 3‑5 years' experience in a command center, service center, or similar 24×7 operations center environment.
• Critical Power:
  Experience responding to failures in Uninterruptible Power Supplies (UPS), emergency generators, and Power Distribution Units (PDUs).
• Cooling & HVAC:
  Proven track record handling cooling loops, chillers, and Computer Room Air Conditioning (CRAC) units during thermal emergencies.
• Monitoring Tools:
  Hands‑on experience triaging real‑time alerts from Building Management Systems (BMS) and Data Center Infrastructure Management (DCIM) tools.
• Standard Operating Procedures:
  Following and executing Emergency Operating Procedures (EOPs) and Method of Procedure (MOP) documents.
• Vendor Management:
  Experience coordinating with external utility companies, fuel delivery vendors, and specialized equipment technicians under tight SLAs.

• Experience in managing Data Center enterprise incidents (facility, NOC, SOC, etc.).
• Associate’s degree in IT, or equivalent experience; 0–2 years in IT or Security Ops.
• Bachelor’s degree in Information Systems or Computer Science; 2–4 years SOC/IR experience.
• 3–5 years of experience in incident response in a data center environment.

• Hands‑on experience with Incident.io, Grafana, Ring, JIRA, Teleport, Confluence.
• Familiarity with log sources (Windows, Linux, firewalls, cloud logs).
• Strong analytical, troubleshooting, and decision‑making skills under pressure.
• Familiarity with regulatory standards (e.g., SOC 2, HIPAA, ISO 27001, NIST).
• Excellent written and verbal communication, including technical documentation.

• Active learner, methodical, eager to follow procedures, dependable.
• Analytical, responsive, detail‑oriented, collaborative, capable of leading investigations.
• Strategic, able to lead IR efforts, skilled at executive communication, mentor to junior analysts.
• Visionary, able to design incident response strategy, align security with business risk, lead multi‑stakeholder efforts.

• Prolonged periods sitting at a desk and working on a computer.
• Ability to use a keyboard, mouse, and other standard office equipment.

$98,040.00 – $ USD (base only; does not include bonuses or other compensation).

• Medical coverage (UHC PPO/HSA or Kaiser HMO for California employees).
• Dental and vision plans.
• Flexible Spending Account for health and dependent care.
• Commuter benefits (pre‑tax parking, transit).
• Paid time off (up to 120 hours annually) and paid holidays.
• 401(k) plan with company match.
• Life insurance, short‑term and long‑term disability, critical illness coverage.
• Tuition reimbursement (after 6 months of employment).
• Corporate wellness and employee assistance programs.