Senior Incident Response Analyst

Job Summary

Owning the end-to-end incident response process, the full-time Senior Incident Response Analyst will manage tier-1 and tier-2 incidents, conduct forensic investigations, and automate evidence collection while working remotely.

Key responsibilities

• Lead detection validation, triage, containment, eradication, recovery, and post-incident reviews for security incidents
• Conduct independent forensic investigations across various domains including host, memory, network, cloud, and identity
• Develop and refine incident response playbooks and automate repetitive triage tasks to enhance team efficiency

Required qualifications

• 6-8 years of hands-on security experience, primarily in incident response and digital forensics
• Proven ownership of the full incident lifecycle, from detection validation to post-incident review
• Expertise in EDR/EPP and SIEM, including query authoring and incident timeline reconstruction
• Fluency with forensic tools and evidence handling that meets legal and regulatory standards
• Experience with scripting for investigation and automation, as well as hands-on use of AI tools in security contexts