Senior Incident Response Analyst

Western Governors University • Raleigh, NC

1d • Onsite

About The Position

The Senior Incident Response Analyst is part of WGU’s Security Operations Center (SOC), which monitors and protects the university’s systems and data through incident response, risk assessment, policy development, audit and compliance, technical operations, and cross-department collaboration. The analyst leads advanced incident response and threat detection across multiple platforms and environments, investigates security events, strengthens detection capabilities, hunts for emerging threats, and partners with engineering and IT teams to improve WGU’s security posture.

This is a full-time, in-office position based five days per week in WGU’s Salt Lake City, Utah, or Raleigh, North Carolina office. The role requires occasional travel of up to 20%, including attendance at designated company summits, typically one to two per year, and may include conferences, visits to company locations, and other business-related travel. WGU does not provide visa sponsorship for this role.

Requirements

• At least 5 years of experience in security operations; 10 or more years earns bonus consideration.
• Hands-on SIEM expertise, including content development, not just querying.
• Experience with CrowdStrike or Carbon Black (EDR), Mimecast, and vulnerability management tools.
• Working knowledge of the MITRE ATT&CK framework and cloud security principles.
• Python or Bash scripting skills for automation and workflow improvement.
• Strong communication skills, including the ability to brief leadership and work across non-security teams.
• Bachelor’s degree in IT Security, Computer Science, or a related field, or equivalent experience. Relevant experience may substitute for education at the hiring manager’s discretion.
• Ability to work in-office five days per week in Salt Lake City, Utah, or Raleigh, North Carolina.
• Ability to travel occasionally, up to 20%, including required attendance at designated company summits.

Nice To Haves

• CISSP, GIAC, CCSP, or AWS Security Specialty certification.
• SOAR experience.
• Experience with cloud-native security tooling.

Responsibilities

• Lead security incident investigations from initial triage through remediation and closure.
• Perform advanced threat detection, analysis, and response across multi-platform environments.
• Investigate suspicious activity using SIEM, EDR, network, and other security tools.
• Develop and tune SIEM alerts, detection rules, and dashboards to improve incident detection and response.
• Conduct threat hunting and research emerging threats to identify and address potential risks.
• Partner with engineering and IT teams to drive incident remediation, harden configurations, and strengthen security controls.
• Support vulnerability management, security audits, compliance initiatives, and risk assessments.

Benefits

• Eligible for bonuses.
• Medical, dental, vision, telehealth, and mental healthcare.
• Health savings account and flexible spending account.
• Basic and voluntary life insurance and disability coverage.
• Accident, critical illness, and hospital indemnity supplemental coverage.
• Legal and identity theft coverage.
• Retirement savings plan.
• Wellbeing program.
• Discounted WGU tuition.
• Flexible paid time off without accrual.
• Flexible paid sick time without accrual.
• 11 paid holidays.
• Other paid leaves, including up to 12 weeks of parental leave.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior