Security Incident Response Analyst

Job Summary

Leading high-severity investigations, the full-time Security Incident Response Analyst will manage incident response processes in a remote setting, focusing on containment, eradication, and recovery of security incidents involving PHI/PII and other sensitive data.

Key responsibilities

• Lead investigations across various telemetry sources, executing containment decisions and ensuring thorough eradication and recovery
• Document incidents involving PHI/PII, collaborating with Privacy, Compliance, and Legal teams for breach assessments and remediation
• Communicate incident statuses to stakeholders and contribute to the enhancement of detection and response capabilities

Required qualifications

• 5+ years in security operations or incident response, with at least 2 years leading high-severity investigations
• Deep expertise in SIEM/detection engineering, identity and access management, and email security investigations
• Experience with endpoint and network security analysis, including familiarity with EDR tools and log analysis
• Fluency with MITRE ATT&CK and experience investigating incidents involving PHI/PII
• Strong written communication skills for creating clear executive updates and technical reports