Senior Incident Response Analyst (R-18809)
Eyeota
Essential Key Responsibilities
- Lead high‑fidelity alert investigations, performing deep technical analysis to rapidly identify, contain, and remediate threats.
- Own complex incident investigations, driving technically precise conclusions and elevating the organization’s detection and response maturity.
- Champion process development, identifying gaps, designing scalable workflows, and implementing improvements that strengthen the Incident Response program.
- Create and refine technical playbooks, documentation, and response guides, ensuring clarity, consistency, and operational excellence.
- Mentor and uplift junior analysts, providing guidance, coaching, and training to build a high-performing team.
- Serve as the escalation point for critical and ambiguous cases, applying advanced threat analysis and sound judgment under pressure.
- Collaborate with engineering, IT, Legal, HR, and business partners to resolve incidents holistically and drive enterprise-wide security improvements.
- Apply strong analytical and technical expertise to continuously enhance SOC processes, workflows, and response capabilities.
- Contribute to the evolution of our detection landscape, partnering with detection engineering to improve log ingestion, alert logic, and signal quality.
- Assess and mitigate AI‑related security risks, including model misuse, prompt injection, data leakage, and emerging automation attack vectors.
- Participate in an on‑call rotation, serving as a trusted responder for high‑severity incidents.
Education and Experience
- Bachelor's degree required with 5+ years of relevant experience
Additional Skills and/or Certifications
- At least 1 SANS/GIAC Certification (GCIH, GREM, GCFA preferred)
- Strong Hands-on experience with: SIEM Platforms (Splunk, Microsoft sentinel, etc), EDR Tools (CrowdStrike, Carbon Black), Cloud environments (Azure, AWS, GCP, AliCloud), Network log analysis (Netflows and PCAP files)
- Deep understanding of: Mitre ATT&CK framework, Malware behavior and exploitation techniques, Windows, Linux, and macOS internals
- Script analysis (Javascript, VBscript, powershell, python)
- Malicious binary analysis (Windows, MacOS, Linux)
- Clear communication rooted in technical competence
- Confidence discussing findings with peers and senior management
Physical Requirements
- Ability to sit, speak and operate telephone and/or computer for long periods of time
- Ability to handle pressure, stressful conditions, and conflict resolution
- Ability to work day, evening and/or weekend hours as needed
- Regular attendance in the office

