Incident Response Analyst I

Role overview

Investigate security alerts across endpoint, email, identity, and network systems, and help coordinate the organization’s incident response. This early-career role supports incident triage, evidence-based case documentation, approved containment, and improvements to detection and response practices. It also works with security, engineering, and technology stakeholders on remediation and preventative controls.

Responsibilities - Triage and investigate alerts and reported events, including suspicious email, using defined priorities and escalation procedures. - Record investigation steps, findings, and dispositions in the case management system, and escalate suspected incidents to digital forensics and incident response teams. - Carry out approved containment actions, such as blocking indicators of compromise or isolating a host. - Identify opportunities to tune detections and automate repetitive response tasks; contribute scripts and playbooks. - Help review security configurations, access controls, and authorization when investigation findings point to gaps. - Coordinate with security architects, engineers, and software or hardware stakeholders, and incorporate relevant third-party threat reporting into incident communications.

Requirements - Bachelor’s degree in a quantitative or business field, such as computer science, engineering, mathematics, statistics, or a related area, and 0–2 years of related experience; equivalent demonstrated experience or completion of a qualifying emerging talent program may also meet the requirement. - Foundational knowledge of networking, including TCP/IP, DNS, and HTTP, and infrastructure such as routers, switches, and firewalls. - Familiarity with Windows and Linux, log analysis, security events, indicators of compromise, and attacker tactics and techniques. - Must be able to work in the United States without current or future employment-based visa sponsorship.

Nice to have - Hands-on exposure to endpoint detection and response, SIEM tools and query languages, email security, phishing analysis, or the MITRE ATT&CK framework. - Basic PowerShell or Python scripting. Security+, SC-200, AWS Cloud Practitioner, or ISC2 CC certification is preferred but not required.

Benefits and work setup The source describes health coverage, retirement and stock purchase plans, tuition reimbursement, paid time off and holidays, and flexible remote, hybrid, field, or office work options. Listed pay is $30.58–$55.09 per hour; actual compensation and benefit eligibility may vary.