Sr. Staff Security Analyst- Incident Commander
Core
Lead detection, investigation, response, and containment of sophisticated cyber threats and major security incidents for UKG and its customers.
Role type
Senior Staff Security Analyst (Incident Commander)
Builds
Incident response playbooks, forensic analysis, threat hunting strategies, and durable detections
Domain
Cybersecurity, Incident Response, Digital Forensics
Required skills
Digital forensics, Incident command, Threat hunting, Malware analysis, Scripting (Python/PowerShell/Bash), Cloud security, SIEM/EDR/SOAR, Reverse engineering, Stakeholder communication, Mentorship
Preferred skills
Reverse engineering, Malware analysis, GenAI-assisted workflows
Technologies
SIEM, EDR, SOAR, Cloud security platforms, Forensic tooling, Python, PowerShell, Bash
Responsibilities
Lead major cyber incident command activities including technical coordination and stakeholder briefings; Perform hands-on digital forensics across endpoint, memory, network, cloud, and runtime environments; Conduct keyboard threat hunting with and without GenAI assistance; Mentor and train analysts during active incidents and post-incident reviews; Develop training materials, playbooks, and procedures for incident response and threat hunting; Use scripting and automation to accelerate investigations and standardize response actions; Partner with Detection Engineering and Threat Intelligence to convert findings into durable detections; Support reverse engineering and malware analysis activities.
Seniority
Senior Staff, hands-on IC with strategic influence
