Senior Incident Response Analyst, InfoSec

Elastic

Confirmed live today High trust

Quick summary

Work type: On-site
Location: —
Salary: $133,100–$210,600 / yr
Posted: 8 days ago
Freshness: Confirmed live today

Market check

Salary context

Competitive pay

How this pay compares to similar roles

Similar $153k

This role $172k

$106k $222k

below market most similar roles pay here above market

This role pays more than 65% of similar roles. Most pay $122,275–$184,325 — the blue band above. At the midpoint, this role pays about $172k versus about $153k for comparable roles.

Based on 240 similar postings.

Employer

About Elastic

Elastic is the company behind Elasticsearch and the Elastic Stack (Elasticsearch, Kibana, Beats, and Logstash). It sells search, observability, and security products built on that search engine, primarily through its Elastic Cloud managed service.

Elastic currently has 52 open roles on FindRole.

Listed pay typically runs $133,100–$210,600 across 52 roles with salary data.

Most-posted roles

View all roles at Elastic

At a glance

TL;DR · Senior Incident Response Analyst, InfoSec

Role Posting Log in to save

The Senior Incident Response Analyst joins the InfoSec team as a front-line defender responsible for securing products and services. You will review and respond to alerts from the Elastic Detection Engine and various monitoring sources, including cloud providers, CI/CD environments, SaaS services, and user workstations. Day-to-day tasks involve conducting analysis on SIEM and endpoint logs, identifying root causes, and coordinating multi-team response activities to remediate control gaps. You will develop innovative approaches to detect and eradicate advanced threats while providing oversight to domain experts. Required skills include experience in security operations, incident response, and log analysis within complex global environments. You must be able to navigate SaaS and cloud infrastructures while utilizing the Elastic Stack to solve critical security problems and optimize processes via AI/ML.

Skills

Elastic Stack SIEM Incident Response CI/CD SaaS AI ML System Administration SRE Threat Detection Security Operations DoD Impact Level 5

What you'll do

Review and respond to security alerts from the Elastic Detection Engine and other monitoring sources.
Conduct analysis on SIEM and endpoint logs during complex security investigations.
Identify root causes of security events and collaborate with teams to remediate control gaps.
Provide feedback to the Threat Detection team to improve detection quality and automated responses.
Develop and document innovative approaches to detect, respond to, and eradicate advanced threats.
Oversee and coordinate multi-team response activities to ensure comprehensive remediation of security gaps.
Identify new integration points to aid in event enrichment and automated response activities.

What we're looking for

At least 3 years of experience related to security operations or incident response in a complex, global environment.
Demonstrated ability to solve complex IT and security problems through log and system analysis.
Experience coordinating response activities to resolve IT and security-related problems with the right people in a timely manner.
Strong communication skills and the ability to make sound decisions with limited information.
Eligibility to work in DoD Impact Level 5 or above cloud service environments.
SaaS and cloud experience is a plus.
Experience or a desire to optimize processes via AI/ML is a plus.
Experience with the Elastic Stack is a plus.

Similar roles

Incident Response Analyst, Senior

Booz Allen Hamilton

Bethesda, MD 46 days ago

Splunk SIEM EDR IDS IPS SOAR Microsoft Defender Vulnerability Management Digital Forensics Packet Analysis Threat Hunting Behavioral Analytics Threat Intelligence Identity and Access Management Container Security API Security Log Analysis Incident Response Playbooks

5+ yrs exp

Save

Incident Response Analyst, Senior

Booz Allen Hamilton

Washington, DC 55 days ago

Incident Response Microsoft Defender EDR Splunk GitHub Archer SOC APT FIN EDR

5+ yrs exp

Save

Senior Incident Response Analyst

Leidos

Arlington, VA 7 days ago $107,900–$195,050

Incident Response EDR IDS SIEM Python PowerShell Bash Malware Analysis Computer Forensics Windows Linux Firewalls VPN Proxies Load Balancers ATT&CK Framework Cyber Kill Chain FISMA

8+ yrs exp

Save

Senior Incident Response Analyst

Leidos

Arlington, VA 37 days ago $131,300–$237,350

Incident Response EDR IDS SIEM Python PowerShell Bash Malware Analysis Computer Forensics Windows Linux Firewalls Proxies Load Balancers VPN ATT&CK Framework Cyber Kill Chain FISMA

10+ yrs exp

Save

Security Incident Response, Senior Analyst

Shopify

76 days ago

Incident Response SIEM SOAR Python Ruby Bash SQL Splunk KQL IAM Okta Microsoft Entra GCP AWS Azure UEBA GitHub Digital Forensics

Save

Incident Response Analyst, Mid

Booz Allen Hamilton

Bethesda, MD 54 days ago

Splunk SIEM EDR IDS/IPS SOAR Digital Forensics Threat Hunting Packet Analysis Malware Triage Vulnerability Management Firewalls Identity and Access Management API Security Container Security Log Analysis Behavioral Analytics Threat Intelligence

2+ yrs exp

Save