Staff CSIRT Analyst

Job Summary

As the cornerstone of internal security resilience, the full-time remote Staff CSIRT Analyst will lead incident response efforts, strategize organizational preparedness, and optimize telemetry sources to enhance security capabilities.

Key responsibilities:

• Lead the identification, triage, and validation of security incidents as the primary escalation point for the SOC
• Drive incident readiness by designing and executing response exercises to prepare first responders across the organization
• Collaborate with engineering and security teams to optimize telemetry sources for improved detection efficacy

Required qualifications:

• 8+ years of experience in Incident Response, SOC Operations, or Digital Forensics (DFIR)
• Advanced knowledge of EDR/MDR platforms, log aggregation (SIEM/ELK), and cloud security environments (AWS/Azure/M365)
• Experience leading small project teams and aligning technology across functions
• Exceptional ability to communicate complex technical details to both technical teams and executive leadership
• Familiarity with automation/SOAR platforms and documentation tools like Confluence and Jira