Senior Incident Response Analyst - InfoSec

Elastic

10d • $133,100 - $252,900

About The Position

As a Senior Incident Response Analyst at Elastic, you will help protect the company's products, services, customers, users, and employees. You will review and respond to alerts from a range of sources, including cloud providers, CI/CD environments, SaaS services, and user workstations. In Elastic’s globally distributed response model, you will provide oversight and guidance to domain experts while also supporting investigations to determine what happened, who was involved, when and where events occurred, and how to secure the environment during and after security incidents.

Requirements

• At least 3 years of experience related to security operations or incident response in a complex, global environment.
• Demonstrated ability to solve complex IT and security problems through log and system analysis, such as in incident response, SRE, or system administration.
• Experience coordinating response activities to resolve IT and security-related problems with the appropriate people in a timely manner.
• Strong communication skills.
• Ability to make sound decisions with limited information and challenge the status quo.
• Eligibility to work in DoD Impact Level 5 or above cloud service environments.

Nice To Haves

• SaaS and cloud experience.
• Experience using the Elastic Stack for log and system analysis.
• Experience or interest in optimizing processes through AI/ML.

Responsibilities

• Review and respond to alerts generated by the Elastic Detection Engine and other monitoring sources.
• Provide feedback to the Threat Detection team to improve detection quality, including identifying false positives, enrichment opportunities, and automated response possibilities.
• Analyze SIEM and/or endpoint logs during complex investigations.
• Develop and document approaches to detect, respond to, and eradicate advanced threats and improve response times.
• Identify integration points that support event enrichment and automated response activities.
• Gather additional context for security events.
• Identify event root causes and collaborate with teams to remediate control gaps or failures.
• Oversee and coordinate response activities across teams and products to ensure comprehensive remediation and mitigation of security posture gaps.

Benefits

• Company-matched 401(k), with dollar-for-dollar matching up to 6% of eligible earnings.
• Health coverage for employees and their families in many locations.
• Flexible locations and schedules for many roles.
• Generous vacation days each year.
• Matching of up to $2,000, or local currency equivalent, for financial donations and service.
• Up to 40 hours each year for volunteer projects.
• At least 16 weeks of parental leave.
• Eligibility to participate in Elastic’s stock program.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed