Incident Response Analyst II

Astreya•Austin, TX

4d•Onsite

About The Position

This role involves entry-level monitoring, triaging basic alerts, and supporting investigations. The analyst will conduct initial incident investigations, escalate confirmed threats, and update run books. As the role progresses, it includes leading incident handling, coordinating cross-functional responses, and performing forensic analysis. At a higher level, the position oversees incident response strategy, threat hunting, red/blue teaming initiatives, and executive-level reporting.

Requirements

Minimum of 3-5 years' experience in a command center, service center, or similar 24x7 operations center environment.
Experience responding to failures in Uninterruptible Power Supplies (UPS), emergency generators, and Power Distribution Units (PDUs).
Proven track record handling cooling loops, chillers, and Computer Room Air Conditioning (CRAC) units during thermal emergencies.
Hands-on experience triaging real-time alerts from Building Management Systems (BMS) and Data Center Infrastructure Management (DCIM) tools.
Following and executing Emergency Operating Procedures (EOPs) and Method of Procedure (MOP) documents.
Experience coordinating with external utility companies, fuel delivery vendors, and specialized equipment technicians under tight SLAs.
Experience in managing Data center enterprise incidents (facility, noc, soc etc.).
Associate’s degree in IT, or equivalent experience.
0–2 years in IT or Security Ops.
Bachelor’s degree in Information Systems, or Computer Science.
2–4 years SOC/IR experience.
3–5 years of experience in incident response in data center environment.
Hands-on experience with Incident io, Grafana, Ring, JIRA, Teleport, Confluence.
Familiarity with log sources (Windows, Linux, firewalls, cloud logs)
Strong analytical, troubleshooting, and decision-making skills under pressure.
Familiarity with regulatory standards (e.g., SOC 2, HIPAA, ISO 27001, NIST).
Excellent written and verbal communication, including technical documentation.
Active learner, methodical, eager to follow procedures, dependable.
Analytical, responsive, detail-oriented, collaborative, capable of leading investigations.
Strategic, able to lead IR efforts, skilled at executive communication, mentor to junior analysts.
Visionary, able to design incident response strategy, align security with business risk, lead multi-stakeholder efforts.
Prolonged periods sitting at a desk and working on a computer.
Ability to use a keyboard, mouse, and other standard office equipment.

Responsibilities

Conducts initial incident investigations
Escalates confirmed threats
Updates run books
Leads incident handling
Coordinates cross-functional responses
Performs forensic analysis
Oversees incident response strategy
Conducts threat hunting
Leads red/blue teaming initiatives
Provides executive-level reporting

Benefits

Medical provided through UHC (PPO, HSA, Surest options)
Medical provided through Kaiser (HMO option only) for California employees only
Dental provided through UHC Nationwide
Vision provided by UHC
Flexible Spending Account for Health & Dependent Care
Pre-Tax Account for Commuter Benefit/Parking & Transit (location-specific)
Continuing Education and Professional Development via various integrated platforms, e.g. Udemy and Coursera
Corporate Wellness Program provided by Goomi Group
Employee Assistance Program
Wellness Days
401k Plan
Basic and Supplemental Life Insurance
Short Term & Long Term Disability
Critical Illness, Critical Hospital, and Voluntary Accident Insurance
Tuition Reimbursement (available 6 months after start date, capped)
Paid Time Off (accrued and prorated, maximum of 120 hours annually)
Paid Holidays
Any other statutory leaves, paid time, or other ancillary benefits required under state and federal law