Senior Incident Response Analyst

Western Governors University•Raleigh, NC

2d•$130,900 - $196,300•Onsite

About The Position

Our Security Operations Center (SOC) team is responsible for a broad range of security operations, including monitoring, incident response, risk assessment, policy development, audit and compliance, technical operations, and collaboration across departments. This team plays a critical role in safeguarding WGU’s systems and data while driving innovation and collaboration across the organization. Security incidents demand more than monitoring. They require fast investigation, sound technical judgment, effective coordination, and the ability to drive remediation through closure. As a Senior Incident Response Analyst, you will help protect WGU’s systems and data by leading advanced incident response and threat detection activities across multiple platforms and environments. You’ll investigate security events, strengthen detection capabilities, hunt for emerging threats, and partner with engineering and IT teams to improve WGU’s overall security posture.

Requirements

5+ years in security operations
Hands-on SIEM expertise, including content development, not just querying
Experience with CrowdStrike or Carbon Black (EDR), Mimecast, and vulnerability management tools
Working knowledge of the MITRE ATT&CK framework and cloud security principles
Python or Bash scripting for automation and workflow improvement
Strong communicator who can brief leadership and work across non-security teams
Bachelor's degree in IT Security, Computer Science, or related field, or equivalent experience

Nice To Haves

CISSP, GIAC, CCSP, or AWS Security Specialty
SOAR experience
Cloud-native security tooling
Equivalent relevant experience may substitute for educational requirements at the hiring manager’s discretion.

Responsibilities

Lead security incident investigations from initial triage through remediation and closure.
Perform advanced threat detection, analysis, and response across multi-platform environments.
Investigate suspicious activity using SIEM, EDR, network, and other security tools.
Develop and tune SIEM alerts, detection rules, and dashboards to improve incident detection and response.
Conduct threat hunting and research emerging threats to identify and address potential risks.
Partner with engineering and IT teams to drive incident remediation, harden configurations, and strengthen security controls.
Support vulnerability management, security audits, compliance initiatives, and risk assessments.