Senior Incident Response Analyst

• Lead incident response activities through triage, investigation, containment, remediation, recovery, and post-incident analysis
• Investigate security events across endpoint, identity, network, cloud, email, and SaaS environments
• Conduct threat hunting and forensic investigations to identify malicious, suspicious, or unauthorized activity
• Develop and enhance detection logic, alerting, playbooks, workflows, and automation
• Serve as a senior escalation point for complex and high-priority security incidents
• Assess emerging threats, including risks associated with AI-enabled technologies
• Prepare clear and actionable investigation reports and communicate findings to technical and non-technical stakeholders
• Mentor team members and contribute to the growth and maturity of the incident response and security operations program
• Provide occasional evening, early morning, or after-hours support for security incidents, investigations, and other time-sensitive matters

• Six (6)+ years of experience in incident response, digital forensics, security operations, or a related cybersecurity discipline
• Experience investigating threats across enterprise endpoint, cloud, identity, network, email, and SaaS environments
• Strong expertise in SIEM technologies, log analysis, event correlation, threat hunting, and incident investigation
• Experience with EDR/XDR platforms and host-based investigation techniques across enterprise environments
• Demonstrated ability to improve detections, streamline response processes, and drive operational improvements
• Experience with security automation, SOAR platforms, Power Shell, Python, KQL, or similar scripting and query languages is preferred
• Strong communication, analytical, and problem-solving skills, with the ability to perform effectively during complex investigations and active incidents
• Bachelor’s degree in information technology, computer science, cybersecurity, or equivalent experience
• Industry certifications such as GCIH, GCIA, GCFA, GCFE, GNFA, or CISSP are preferred
• Flexibility to meet operational and business needs
• Occasional evening, early morning, or after-hours support may be required
• Exempt position

Demonstrates extensive experience in incident response, digital forensics, and security operations, with a strong focus on threat hunting, investigation, and automation. Capable of mentoring team members and effectively communicating findings to diverse stakeholders.

• Incident Response
• Digital Forensics
• SIEM Technologies
• EDR/XDR Platforms
• Security Automation

• Threat Hunting
• Log Analysis
• Event Correlation
• Incident Investigation
• Detection Logic Development
• Power Shell
• Python
• KQL
• Forensic Investigations
• Risk Assessment

• Analytical Skills
• Problem-Solving Skills
• Communication Skills
• Mentoring

• GCIH
• GCIA
• GCFA
• GCFE
• GNFA
• CISSP

• Cybersecurity
• Incident Response Program
• Security Operations
• Emerging Threats
• AI-Enabled Technologies

• SOAR Platforms
• Automation Tools
• Cloud Environments
• SaaS Environments
• Endpoint Security