Incident Response Analyst

• Investigate, triage, analyze, contain, eradicate, and support recovery activities for cybersecurity incidents across enterprise and cloud environments.
• Perform detailed analysis of security events generated by SIEM, EDR/XDR, IDS/IPS, cloud-native security tools, and endpoint technologies.
• Collaborate with Security Operations and Splunk Detection Engineering teams to improve detection content, tune alerts, reduce false positives, and enhance detection effectiveness.
• Conduct proactive threat hunting using threat intelligence, behavioral analytics, and MITRE ATT&CK techniques.
• Perform root cause analysis and recommend corrective and preventive actions.
• Document investigation findings, incident timelines, lessons learned, and technical reports.
• Assist in developing and maintaining Incident Response playbooks, SOPs, and workflows.
• Support digital evidence collection and basic forensic activities while maintaining chain of custody.
• Participate in security assessments, architecture reviews, tabletop exercises, phishing simulations, and readiness activities.
• Support security reviews of IT systems, applications, and cloud services.
• Assist with cybersecurity policies, standards, and operational procedures.
• Collaborate with Cloud Security, Vulnerability Management, Infrastructure, and Application teams.
• Monitor incident metrics and contribute to operational reporting.
• Stay current on emerging threats and industry best practices.
• Performs other job-related duties as assigned.

Senior Incident Response Analyst

• Lead high‑fidelity alert investigations, performing deep technical analysis to rapidly identify, contain, and remediate threats.
• Own complex incident investigations, driving technically precise conclusions and elevating the organization’s detection and response maturity.
• Champion process development, identifying gaps, designing scalable workflows, and implementing improvements that strengthen the Incident Response program.
• Create and refine technical playbooks, documentation, and response guides, ensuring clarity, consistency, and operational excellence.
• Mentor and uplift junior analysts, providing guidance, coaching, and training to build a high-performing team.
• Serve as the escalation point for critical and ambiguous cases, applying advanced threat analysis and sound judgment under pressure.
• Collaborate with engineering, IT, Legal, HR, and business partners to resolve incidents holistically and drive enterprise-wide security improvements.
• Apply strong analytical and technical expertise to continuously enhance SOC processes, workflows, and response capabilities.
• Contribute to the evolution of our detection landscape, partnering with detection engineering to improve log ingestion, alert logic, and signal quality.
• Assess and mitigate AI‑related security risks, including model misuse, prompt injection, data leakage, and emerging automation attack vectors.
• Participate in an on‑call rotation, serving as a trusted responder for high‑severity incidents.

• Efficiently manages reconstruction portion of loss for insurance carrier and expedite closure of files
• Regular communication and active file management throughout the reconstruction process
• Evaluates extent of reconstruction needed and discusses the reconstruction process with the insured
• Review loss and coverage information and determine if the loss will be within policy limits
• Verifies status of files with Insurance Carrier
• Works in partnership with assigned contractor
• Communicates with customer to recommend reserve amount based on exposure

Managed Repair Analyst II

• Serving as the point of contact for cyber systems events to manage communications and coordination
• For cyber breaches by vendors, working closely with the Cyber team, gathering details on the cyber breach, applying lessons learned and documenting events
• For client cyber breaches, collaborating with the Cyber team, Anti-Fraud, and other stakeholders in coordinating responses and documentation
• Coordinating the cyber incident response process from initial detection to resolution, ensuring timely action and communication
• Enhancing incident response documentation and procedures
• Point of escalation for the cyber incident management team and fostering collaboration
• Participating in cyber-related tabletop exercises and conducting social engineering exercises

Cyber Incident Response Manager

• Provide real-time analysis of escalated security events to support response efforts.
• Analyze data from endpoints, EDR systems, firewalls, and servers to identify, contain, and remediate suspicious activity.
• Analyze malicious scripts and code to mitigate potential threats.
• Engage in Threat Hunting operations to proactively identify and mitigate threats.
• Conduct predictive or reactive analyses on security measures to support cyber security initiatives.
• Create system images or capture network settings from IT environments to preserve as evidence.
• Forensically duplicate digital evidence for data recovery and analysis procedures.
• Perform web service network traffic analysis to detect anomalies.
• Contribute to cyber threat intelligence analysis and bolster defensive actions.
• Post-incident analysis, identifying root causes and reinforcing security measures.
• Contribute to training and skill development opportunities for self and teammates.
• Develop or refine policies for data collection, processing, and reporting.
• Recommend cyber defense software or hardware to support responses to cyber incidents.
• Adhere to legal policies related to handling digital media.
• Stay current on emerging threats and vulnerabilities.
• Write and execute scripts to automate tasks, such as parsing large data files.
• Write cyber defense reports or white papers using research or experience.
• Write accurate technical summaries to report findings and recommendations.

Mid-Level Digital Forensics and Incident Response Analyst

• Lead and conduct comprehensive host forensics, network forensics, log analysis, and malware triage to support incident response investigations.
• Create and enhance scripts, tools, and methodologies to automate and improve our incident investigation processes.
• Provide leadership and mentorship to the incident response team, acting as a resource and guide for other team members.
• Partner with multiple internal and external organizations. Draft detailed reports, assign remediation actions, and implement improvements.
• Develop and present comprehensive reports, training sessions, and presentations for both technical and non-technical audiences.
• Participate in and help conduct tabletop exercises and incident simulations to ensure readiness.
• Collaborate with the Adobe Threat Hunting Team to conduct proactive and iterative hunts through cloud and enterprise networks, endpoints, and datasets to detect malicious or suspicious activities that have evaded existing detection tools.

Staff Cyber Incident Response Engineer

• Conduct investigations into a variety of malicious activity on workstations, servers, and in the cloud.
• Investigate all levels of incidents, including Incident Response engagements.
• Own complex investigations that may need various levels of delegation, customer communication, documentation, and collaboration across teams.
• Be an escalation point for complex and advanced incidents.
• Prepare Incident Reports for each minor incident investigation you complete.
• Communicate with other analysts to share new intelligence regarding tactics, techniques, and trends utilized by threat actors.

Incident Response Analyst jobs in United States

See all jobs on JobTailor

Senior Incident Response Analyst

Senior Incident Response Analyst

Senior Incident Response Analyst

Managed Repair Analyst II

Cyber Incident Response Manager

Mid-Level Digital Forensics and Incident Response Analyst

Staff Cyber Incident Response Engineer

Incident Handler