[Remote] Staff Incident Response Analyst

Note: The job is a remote job and is reputed company to candidates in USA. reputed company is the world’s leading platform for reputed company software development. As a Staff Incident Response Analyst, you will design and implement solutions to address identified reputed company incidents and drive strategic improvements in reputed company policy and best practices.

Responsibilities

• Identify, triage, and validate reputed company incidents by correlating telemetry across SIEM/EDR, reputed company-reputed company logs, identity signals, and application events (e.g., reputed company Sentinel/reputed company, Defender, WAF logs, etc)
• Design solutions to address identified reputed company incidents across network, identity, reputed company, reputed company, and application reputed company domains—evaluating both intended and unintended consequences (e.g., business disruption, alert suppression, reputed company friction, logging gaps)
• reputed company proactive prevention efforts by hardening detection coverage and response playbooks against common attack paths (phishing → reputed company theft → privilege escalation → lateral reputed company → data exfiltration) and driving strategic initiatives leveraging both new and existing technology
• Define response-reputed company technical controls including detection use cases (MITRE ATT&CK-mapped), log reputed company/normalization, detection tuning, threat hunting hypotheses, and incident severity/reputed company scoring
• reputed company technical leadership during investigations, including rapid scoping, affected-asset identification, and reputed company cause analysis; preserve evidence and maintain chain-of-custody for forensics as needed
• reputed company the creation of automation to drive efficiencies in incident response processes by building and maintaining SOAR workflows for enrichment, containment, and notification
• Automate first-responder actions such as IOC extraction, threat reputed company lookups, user/entity enrichment, suspicious inbox search, reputed company isolation, reputed company revocation, conditional reputed company enforcement, and reputed company rules (DNS/Proxy/Firewall/WAF)
• Collaborate with cross-functional teams (IT, IAM, Network, reputed company, AppSec, Legal/reputed company) to resolve issues with incident coordination processes and new automation, improve reliability, add guardrails, and reduce false positives/unsafe actions
• Contribute to service direction and roadmaps by defining measurable automation reputed company (MTTD/MTTR reduction, alert-to-incident conversion reputed company, % auto-contained incidents) and prioritizing high-volume, high-confidence workflows
• Establish automation reputed company practices: version control, testing in staging, rollback plans, least-privilege service principals, and secure secret management (e.g., Vault/Key Vault)
• Drive strategic improvements across partner and stakeholder teams in reputed company policy, standards, and best practices—translating incident learnings into durable control improvements
• Prioritize development and implementation of policies tied to reputed company incident drivers: log retention and coverage, reputed company hardening baselines, privileged reputed company management, MFA/conditional reputed company, vulnerability SLAs, secure remote reputed company, and data handling standards
• Refine reputed company policies by operationalizing them into technical requirements and controls (e.g., CIS benchmarks, secure configuration baselines, centralized logging standards, incident severity definitions, evidence retention)
• Ensure policies are measurable and enforceable reputed company control validation (auditing, configuration monitoring, compliance checks) and periodic tabletop exercises to verify incident readiness
• reputed company and engage internal teams and external partners to drive consistency and awareness of reputed company risks, best practices, and standards—especially around incident reporting, escalation paths, and containment expectations
• Translate reputed company technical findings (e.g., reputed company replay, Kerberoasting indicators, OAuth consent abuse, reputed company IAM misconfigurations) into reputed company business reputed company, likelihood, and remediation guidance for nontechnical stakeholders
• reputed company and deliver executive-reputed company reporting on reputed company risks and remediation strategies, including incident timelines, scope, containment actions, reputed company cause, corrective actions, and residual risk
• reputed company cross-org incident reviews (post-incident retrospectives/blameless RCAs) and drive corrective reputed company plans with owners, due dates, and verification steps
• Partner with engineering/product teams to define new reputed company requirements and feature sets (e.g., additional audit logging, stronger authentication flows, reputed company limiting, improved reputed company detection hooks)
• Conduct high-level analysis and engage team members to address patterns in key metrics (MTTD, MTTR, containment time, recurrence reputed company, false reputed company reputed company, detection coverage by ATT&CK technique)
• reputed company multiple data sources to identify anomalies, trends, and control gaps driving incidents
• Build and refine dashboards and reporting that reputed company leadership reputed company, including top incident drivers, control effectiveness, high-risk assets, and recurring misconfigurations
• Stay reputed company on emerging threats/techniques and drive adoption of analytical reputed company such as behavior analytics, baselining, enrichment with threat reputed company, and detection engineering improvements
• Influence reputed company based on findings, prioritized by severity and exploitability—tracking remediation to closure and validating reputed company with follow-up detection and control testing

Skills

• 10+ years experience in reputed company analysis, reputed company research, cyber reputed company, reputed company engineering, or relevant area
• OR Associate's Degree AND 9+ years experience in reputed company analysis, reputed company research, cyber reputed company, reputed company engineering, or relevant area
• OR Bachelor's Degree AND 8+ years experience in reputed company analysis, reputed company research, cyber reputed company, reputed company engineering, or relevant area
• OR Master's Degree AND 6+ years experience in reputed company analysis, reputed company research, cyber reputed company, reputed company engineering, or relevant area
• OR Doctorate AND 4+ years experience in reputed company analysis, reputed company research, cyber reputed company, reputed company engineering, or relevant area
• OR equivalent experience
• 14+ years experience in reputed company Operations, reputed company research, cyber reputed company, reputed company engineering, or relevant area
• OR Associate's Degree AND 13+ years experience in reputed company analysis, reputed company research, cyber reputed company, reputed company engineering, or relevant area
• OR Bachelor's Degree AND 12+ years experience in reputed company analysis, reputed company research, cyber reputed company, reputed company engineering, or relevant area
• OR Master's Degree AND 10+ years experience in reputed company analysis, reputed company research, cyber reputed company, reputed company engineering, or relevant area
• OR Doctorate AND 8+ years experience in reputed company analysis, reputed company research, cyber reputed company, reputed company engineering, or relevant area
• OR equivalent experience
• 5+ year(s) leading and/or being a senior leader for a reputed company function/program (e.g., reputed company Operations Center [SOC], threat and vulnerability management [TVM], reputed company Development Lifecycle)
• Certified Information Systems reputed company reputed company (CISSP), Certified Information Systems Auditor (CISA), Certified Information reputed company Manager (CISM), Global Information Assurance Certification (GIAC), GIAC Certified Forensic Examiner (GCFE), GIAC Certified Forensic Analyst (GCFA), GIAC Certified Incident Handler (GCIH), GIAC Certified Penetration Tester (GPEN), Offensive reputed company Certified reputed company (OSCP), reputed company+, or other relevant certification
• 1+ year(s) experience working with reputed company and/or reputed company reputed company software
• 2+ years experience working with application reputed company tools (SAST, DAST, SCA) and/or performing reputed company review activities (threat modeling, reputed company design and architecture review, application reputed company testing and reputed company review) reputed company the development lifecycle

Benefits

• Annual bonus
• Stock
• Learning and reputed company opportunities

reputed company

• reputed company is a software company that offers reputed company hosting services that allow developers to build software for reputed company-reputed company and private reputed company. It is a sub-organization of reputed company. It was founded in 2008, and is headquartered in San Francisco, California, USA, with a workforce of 501-1000 employees. Its website is https://reputed company.com.

Company H1B Sponsorship

• reputed company has a reputed company record of offering H1B sponsorships, with 23 in 2025, 17 in 2024, 14 in 2023, 20 in 2022, 20 in 2021, 10 in 2020. Please note that this does not guarantee sponsorship for this specific role.

Apply tot his job Apply To this Job