Cybersecurity Incident Response Analyst II
Chandler, Arizona (McKemy), United States
USD 132K-172K (estimate) Senior-level Full Time
Tasks
- Coordinate investigative workstreams during complex incidents
- Correlate telemetry across EDR SIEM and other sources
- Determine root cause and business impact
- Develop incident reports and executive summaries
- Identify detection gaps and improve detections
- Investigate escalated cybersecurity incidents
- Maintain incident response playbooks and procedures
- Participate in post incident reviews and apply lessons learned
- Perform proactive threat hunting
- Support SOC escalation and guide investigations
- Validate scope and containment actions
Perks/Benefits
- 401k
- Dental insurance
- Education assistance
- Flexible spending account
- Health savings account
- Leadership development
- Life insurance
- Long-term disability insurance
- Medical insurance
- Mentorship programs
- Paid Holidays
- Paid leave
- Paid time off
- Pension plan
- Short-term Disability Insurance
- Vision insurance
- Wellness programs
Skills/Tech-stack
Access Management | Case management | Cause analysis | Cloud Security | Detection and Response | Endpoint Detection and Response | Endpoint detection | Identity and Access Management | Identity and access | Incident Response | Log Analysis | Mitre Attack | NIST 800 | NIST 800-61 | Network Traffic | Network Traffic Analysis | Query Language | Root Cause Analysis | Root cause | SIEM | SOAR | Structured Query | Structured Query Language | Telemetry correlation | Threat Intelligence | Threat hunting | Traffic analysis | Windows Events
Education
N/A
Related jobs
-
Cybersecurity Analyst USD 86K-158KAntivirus | Application Firewall | Event triage | Firewall | IDS/IPS401k match | Dental insurance | Life insurance | Long-term disability | Medical insuranceMid-level Full TimePortland, OR17h ago
-
Sr. Investigator, Cyber Security USD 100K-125KAccess Management | Case management | Cloud Security | DLP | Data Loss PreventionSenior-level Full TimeOrlando, Florida, United States22h ago
-
Insider Threat Analyst - 885 USD 111K-219KAccount monitoring | Behavioral Analysis | DLP | DTEX | Data Loss PreventionRemote work opportunityMid-level Full TimeUS Arlington, VA R1d ago
-
Coso | Cybersecurity | ISO 27001 | Information Risk | Information TechnologyEntry-level Full TimeBuffalo, New York, United States; Rochester, …1d ago
-
Cyber Security Incident Response Team Analyst USD 86K-123KDatabases | EDR | Firewall Log Analysis | IPS | Incident ManagementMid-level Full TimeAuburn Hills, MI, United States1d ago
-
Alert enrichment | Detection Systems | Detection and Response | Detection engineering | Endpoint Detection and Response24 7 SOC support | Holiday shifts | On-call rotations | Scheduled shift workMid-level Full TimeSan Jose, California, United States1d ago
-
Information Security Analyst USD 118K-185KATO Compliance | Antivirus | Cybersecurity Documentation | DOD Security Compliance | DoD SecuritySenior-level Full TimeArlington, VA, United States1d ago
-
Security Analyst USD 100K800-53 | Access Management | Amazon Web Services | Azure | Configuration Management401k retirement plan | Dental insurance | Educational assistance | Health insurance | Life insuranceMid-level Full TimeBethesda, VA, United States1d ago
-
Cloud Security | Compliance | Control Frameworks | Crisis management | Cyber Security401 k retirement plan | Dental insurance | Disability insurance | Health insurance | Life insuranceMid-level Full TimeHouston, TX (HO) - Digital & …1d ago
-
Sr Analyst, Information Security USD 117K-196KADCs | AV evasion | Active Directory | Adversary Emulation | Application exploitationSenior-level Full TimeLowe's Charlotte Technology Hub 3505, United …1d ago
-
Vulnerability Analyst USD 99K-225KCVSS | CWE | Compliance Monitoring | Cybersecurity reporting | Exploitability assessmentMid-level Full TimeUSA, DC, Washington (400 7th St …1d ago
-
Cybersecurity Risk Analyst USD 82K-220K800-171 | 800-53 | AWS | Azure | CMMCDiscounts to local museums and cultural activities | Employee clubs | Finance workshops | Health workshops | Off-site social eventsMid-level Full TimeMA - Cambridge, United States1d ago
-
ISSO (Information System Security Officer) USD 97K-131K800-53 | AWS | Access Control | Authority to Operate | AzureMid-level Full TimeCambridge, MA1d ago
-
ISSO and Cyber Security Analyst USD 77K-176KAWS | Azure | Cloud Security | Cyber Security | Digital forensicsDependent care | Paid leave | Professional development | Recognition awards | Tuition assistanceSenior-level Full TimeUndisclosed Location - USA, TX, San …1d ago
-
ISSO and Cyber Security Analyst USD 77K-176KAWS | Azure | DIACAP | Digital forensics | FISMADependent care | Paid leave | Professional development | Tuition assistance | Work-life programsSenior-level Full TimeUndisclosed Location - USA, TX, San …1d ago
-
Cybersecurity Risk Analyst USD 62K-141KCybersecurity | DoD Cybersecurity | DoD policy | FISMA | Information securityDependent care | Paid leave | Professional development | Tuition assistance | Work-life programsMid-level Full TimeUSA, VA, Alexandria (4800 Mark Center …1d ago
-
Cyber Supply Chain Risk Management Analyst USD 69K-158K800-171 | 800-53 | ATO Authorization Packages | ATO/authorization | AWSDependent care | Paid leave | Professional development | Tuition assistance | Work-life programsMid-level Full TimeUSA, VA, Alexandria (6359 Walker Ln), …1d ago
-
Information System Security Officer USD 99K-225K800-53 | ACAS | ATO/authorization | Ansible | Assurance casesDependent care | Disability insurance | Health insurance | Life insurance | Paid leaveMid-level Full TimeUSA, VA, Reston (12310 Sunrise Valley …1d ago
-
Cyber Operations Specialist (3rd Shift) USD 110K-110KAccess Management | Access reviews | Data Analysis | Identity and Access Management | Identity and access401k matching | Paid Holidays | Paid sick leave | Paid time offMid-level Full TimeZebulon NC - 49 Green Pace …1d ago
-
Cyber Risk Management Analyst USD 61K-141KCompliance | Continuous Monitoring | Cyber Risk | Cyber Risk Management | CybersecurityDependent care | Paid leave | Professional development | Tuition assistance | Work-life programsMid-level Full TimeUSA, NM, Albuquerque (6501 Americas Pkwy), …1d ago
-
Amazon Web Services | Arsenal Recon | Axiom | Bash | Capture analysisSenior-level Full TimeRedstone Arsenal, AL, USA1d ago
-
Mid-level Full TimeColumbia, SC3d ago
-
Sr. Cybersecurity Analyst III USD 180K-200KAccess Controls | Data encryption | Firewall | Forensic analysis | Incident Handling401k match | Dental insurance | Dependent care | Employee Assistance and Wellness Programs | Flexible work arrangementsSenior-level Full TimeWashington, DC3d ago
-
Security Operations Engineer I USD 125K-155KAccess Management | Alert triage | Automation | Azure AD | Cortex XDR401k retirement plan | Dental coverage | Medical coverage | Stock options | Vision coverageMid-level Full TimeRedondo Beach3d ago
-
Computer Network Defense Analyst-Senior USD 105K-150KComputer forensics | Cybersecurity Incident Response | Detection Systems | Firewalls | Incident ResponseSenior-level Full TimeAnnapolis Junction, Maryland, United States3d ago