Senior Incident Response Analyst - InfoSec

The role

You will review and respond to alerts across cloud providers, CI/CD environments, SaaS services, and user workstations. You will provide oversight to domain experts and conduct investigations to identify the cause of security events.

What you will do

• Review and respond to alerts from Elastic Detection Engine and other monitoring sources
• Provide feedback to the Threat Detection team to improve detection quality
• Conduct analysis on SIEM and/or endpoint logs during complex investigations
• Develop and document approaches to detect, respond to, and eradicate advanced threats
• Identify integration points for event enrichment and automated response
• Gather additional context for security events
• Identify the root cause of events and collaborate to remediate control gaps
• Oversee and coordinate response activities across multiple teams and products

Required qualifications

• At least 3 years of experience related to security operations / incident response in a complex, global environment
• Ability to solve complex IT and security problems through log and system analysis
• Experience coordinating response activities to resolve IT and security-related problems
• Strong communication skills
• Eligible to work in DoD Impact Level 5 or above cloud service environments

Nice to have

• SaaS and cloud experience
• Experience or a desire to optimize processes via AI/ML
• Experience using the Elastic Stack

Benefits

• Competitive pay
• Health coverage for you and your family in many locations
• Flexible locations and schedules
• Generous number of vacation days each year
• Match up to $2000 for financial donations and service
• Up to 40 hours each year for volunteer projects
• Minimum of 16 weeks of parental leave
• Company-matched 401k up to 6% of eligible earnings
• Eligibility to participate in stock program

Before you apply

• Must be eligible to work in DoD Impact Level 5 or above cloud service environments
• Export license may be required for individuals located in or nationals of Belarus, Cuba, Iran, North Korea, Syria, or Russia, including the annexed Ukrainian territories

About the company

Elastic is the Search AI Company that enables everyone to find answers in real time using all their data at scale. The company provides cloud-based solutions for search, security, and observability.