Incident Response Analyst II
Core
Lead analyst for incident response, digital forensics, intrusion detection, and continuous monitoring to defend applications, systems, and networks.
Role type
Senior IC incident response and security operations analyst
Builds
Defensive security capabilities, automated detection rules, and incident response playbooks
Domain
Cybersecurity, cloud security, and compliance
Required skills
Incident response, digital forensics, SIEM analysis, intrusion detection, network traffic analysis, scripting (Bash/Python), cloud security, MITRE ATT&CK Framework, security automation, firewall management, compliance program implementation
Preferred skills
Penetration testing, security architecture design, end-user documentation, cloud infrastructure management
Technologies
SIEM, IDS/IPS, endpoint security, DLP, HIPS, EPP, client proxy, firewalls, AWS, CI/CD pipelines, infrastructure-as-code
Responsibilities
Investigate security events and unusual activity using security technologies; analyze phishing emails, logs, and network traffic to identify malicious behavior; lead tactical response efforts to address security risks; develop and refine SIEM security rules aligned with MITRE ATT&CK; collaborate with architects and risk professionals to integrate security controls; improve security operations through automation and lessons learned
Seniority
Mid-Senior, hands-on IC
