Cybersecurity Incident Response Analyst, Senior

Cook Children's Health Care System • Remote - TX, TX

2d • Remote

About The Position

The Cybersecurity Incident Response Analyst Senior (“Senior IR Analyst”) is a member of the Cybersecurity team within the Office of the CISO, focused on protecting sensitive data, applications, and critical systems through effective detection and response to security threats. The Senior IR Analyst is responsible for detecting, responding to, and mitigating security incidents within the organization’s environment to minimize immediate and future risk. This role applies a comprehensive approach across preparedness, mitigation, response, and recovery to ensure the protection of data, preservation of assets, and overall security of information systems. The Senior IR Analyst conducts in-depth investigations of security events, analyzes response activities, and continuously evaluates and enhances incident response processes. Leveraging defensive tools, threat intelligence, and data from multiple sources, this role identifies, analyzes, and reports potential and active threats across enterprise networks to safeguard systems and sensitive information.

Requirements

• Bachelor’s degree in computer science, information systems, cybersecurity, or a related field
• Minimum of 5 years of experience in cybersecurity operations, incident response, or security monitoring within an enterprise environment.
• Demonstrated hands-on experience investigating and responding to security incidents across network, endpoint, and/or cloud environments.
• Experience working with security technologies, such as SIEM, EDR, SOAR, intrusion detection/prevention systems, and case management tools.
• Experience performing incident triage, analysis, containment, and remediation activities in a production environment.
• Experience developing or executing incident response procedures, playbooks, or runbooks.

Responsibilities

• Detecting, responding to, and mitigating security incidents within the organization’s environment to minimize immediate and future risk.
• Applying a comprehensive approach across preparedness, mitigation, response, and recovery to ensure the protection of data, preservation of assets, and overall security of information systems.
• Conducting in-depth investigations of security events.
• Analyzing response activities.
• Continuously evaluating and enhancing incident response processes.
• Identifying, analyzing, and reporting potential and active threats across enterprise networks to safeguard systems and sensitive information.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior