Staff IT Security Analyst-Incident Response
Core
Lead incident response, threat detection, investigation, and remediation while shaping security tools and automation to strengthen defenses.
Role type
Staff IT Security Analyst-Incident Response (Lead-level, hands-on technical leader)
Builds
Cloud threat analytics, SOAR automation, detection logic, and security capabilities across cloud infrastructure and CI/CD pipelines
Domain
Cybersecurity, Cloud Security, Incident Response
Required skills
Incident response and investigation, MITRE ATT&CK Framework, SIEM content development, Cloud infrastructure-as-code (CloudFormation, CDK), Scripting (Bash, Python), Open-source security tools, AWS APIs and services, CI/CD pipeline security, Cloud and data security architecture
Preferred skills
15+ years of Information Security experience, Distance education experience
Technologies
AWS (Lambda, DynamoDB, EC2, VPC, CloudFront, CloudTrail, CloudWatch, IAM), ServiceNow, MITRE ATT&CK, Kali, Nessus, Burp, NMap, Metasploit, Wireshark
Responsibilities
Lead complex incident response and investigation efforts including forensic support and remediation; Develop detection logic and security content aligned to MITRE ATT&CK; Architect and build cloud threat analytics using log correlation and AI/ML; Design and implement SOAR and security automation; Identify security gaps and lead technical solutions from architecture to operation; Mentor analysts and provide hands-on guidance during security situations
Seniority
Staff, hands-on technical leader with mentorship responsibilities
