Incident Response Analyst, Mid

What you'll do

• Perform continuous monitoring, detection, investigation, and response to cybersecurity threats across enterprise networks and applications.
• Conduct alert and incident triage, log and artifact analysis, and threat identification using SIEM, EDR, and forensic tools.
• Execute containment support and incident documentation to validate and escalate security events.
• Develop and contribute to incident response playbooks and standard operating procedures.
• Conduct proactive threat hunting using behavioral analytics and threat intelligence to identify emerging risks.
• Analyze forensic images and triage datasets to identify indicators of compromise and unauthorized data exfiltration.
• Produce high-quality incident reports and briefings for both technical and non-technical audiences.
• Review and guide the activities of more junior employees to ensure operational effectiveness.

What we're looking for

• 2+ years of experience in a SOC performing incident response activities including event triage, log analysis, and threat identification.
• Experience using Splunk for security monitoring, log analysis, event correlation, investigation, and incident response.
• Experience analyzing and responding to security events across enterprise networks, endpoints, applications, and platforms like SIEM, EDR, and IDS/IPS.
• Experience developing or contributing to incident response playbooks, workflows, or standard operating procedures.
• Experience with continuous monitoring and security assessment practices, including log analysis, control evaluation, and risk identification.
• Experience with security tools and investigative techniques such as packet analysis, malware triage, and forensic imaging.
• Ability to communicate clearly with technical and non-technical audiences and produce high-quality incident reports and briefings.
• Bachelor's degree.