Remote Senior Cyber Security Incident Response Analyst Competition

Job Description

A Fortune 100 transportation company headquartered in Memphis, TN is looking for a Senior Cyber Security Incident Response Analyst. The Cyber Incident Response Analyst will report to the Manger of Incident Response and will be responsible for handling Teir 3 and Teir 4 level cyber security incidents. This role ensures timely containment, recovery, and communication with key stakeholders while keeping business units informed throughout the incident lifecycle.

This team also assists in threat hunting and proactive measures, as well as the development of automated SOAR actions and other custom tooling.

The role involves responding to information security incidents escalated to the Incident Response team and managing all phases of the response lifecycle for assigned cases. It also includes conducting post-incident technical investigations to determine root causes and ensuring lessons learned lead to strengthened defenses and effective remediation strategies. The position participates in red and purple team exercises, tabletop simulations, and other preparedness activities.

Additionally, it contributes to developing automated response capabilities within existing SIEM and SOAR platforms, including creating custom response scripts through API integrations. Responsibilities also include helping maintain incident response playbooks, escalation protocols, cross-team coordination processes, the User and Entity Behavior Analytics (UEBA) program, and model alert correlation workflows. The role requires active collaboration with remote teams to ensure consistent response practices, adherence to all relevant laws, regulations, and company policies, and performing other duties as assigned.

• Bachelor’s degree in business, computer science, information systems and / or related field or equivalent formal training
• 5-7 years of experience in information technology, cyber security, or incident response roles
• Experience with cyber incident response processes, including detection, analysis, containment, eradication, and recovery
• Background in:
  Dev Ops or Dev Sec Ops  
  -OR Securing AI agents or MCP (model context protocol) servers
• Scripting Experience - Power Shell, Python, Etc.
• Tools: 3+ years with Crowd Strike
• Tier 4 support:
  Malware, data access, ransomware, phishing, etc CERT: OSCP
• Foundry/Fusion

We are an equal opportunity/affirmative action employer that believes everyone matters.