Senior Incident Response Analyst

Accountabilities: Incident Response and Investigation: Develop and operationalize scalable solutions for security incidents involving network, identity, and application security. Participate in incident response activities, investigate threats using advanced forensic techniques, and drive effective remediation. Automation and Process Improvement: Identify, prioritize, and implement automation opportunities that improve the speed, efficiency, and reliability of incident detection and response. Develop and maintain scripts and tools while continuously refining existing processes. Security Policies and Risk Management: Contribute to security policies, standards, and best practices. Design mitigation strategies to address policy gaps, conduct risk assessments and audits, and support compliance with applicable security regulations and standards. Data Analysis and Forensics: Analyze security data from multiple sources to identify anomalies, patterns, and emerging trends. Monitor key performance indicators, escalate significant findings, and recommend metrics and improvements that strengthen incident response capabilities. Cross-Functional Collaboration: Partner with internal teams, external stakeholders, and architecture specialists to promote security awareness and embed security principles into system and application design. Communication and Reporting: Translate complex technical issues into clear, actionable information for nontechnical audiences. Prepare reports for leadership outlining security risks, investigation findings, and recommended remediation strategies. Continuous Security Enhancement: Recognize recurring incident patterns and emerging vulnerabilities, recommend innovative improvements, and contribute to a culture of proactive risk reduction and operational excellence. Requirements: Professional Experience: At least 7 years of experience in security analysis, security research, cybersecurity, security engineering, or a related field; alternatively, an associate degree with 6+ years, a bachelor's degree with 5+ years, a master's degree with 3+ years, a doctorate with 1+ year, or equivalent experience. Advanced Security Experience: Preferred 9+ years of experience in security operations, security research, cybersecurity, security engineering, or a related discipline. Security Certifications: Relevant certifications are preferred, including CISSP, CISA, CISM, GIAC certifications such as GCFE, GCFA, GCIH, or GPEN, OSCP, Security+, or equivalent credentials. Software Development: Preferred experience includes at least one year of software development experience. Application Security Expertise: Experience with application security tools and practices, including Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), Software Composition Analysis (SCA), threat modeling, security architecture reviews, application security testing, and code reviews within the development lifecycle. Open-Source Experience: At least one year of experience working with GitHub and/or open-source software is preferred. Technical and Analytical Skills: Strong investigative, forensic, and data analysis capabilities, with the ability to identify patterns, evaluate security risks, develop mitigation strategies, and improve incident response processes. Communication and Collaboration: Excellent written and verbal communication skills, sound technical judgment, and the ability to collaborate effectively across teams while explaining complex security concepts to diverse audiences. Benefits: Salary: Annual base salary range of $124,000–$329,200 USD, depending on geographic location, experience, knowledge, skills, and qualifications. Additional Rewards: Eligible roles may offer annual bonuses and stock-based compensation, based on role eligibility and individual impact. Remote Flexibility: Remote-first working environment, with the ability to work remotely from within the United States. Learning and Career Development: Opportunities for professional growth, ongoing learning, and development of advanced cybersecurity expertise. Inclusive Environment: Commitment to diversity, inclusion, and equal employment opportunities for candidates from varied backgrounds. Accessibility: Reasonable accommodations are available during the interview process for candidates who need them. Application Timeline: The position will remain open for at least three days, with applications accepted on an ongoing basis until the role is filled.