Automation-Driven Incident Response Analyst

The Carlyle Group; Washington (District of Columbia); On-site; USD 120,000 - 180,000; Full time

Job summary

The Carlyle Group is seeking an experienced Incident Response Analyst to join its Security Operations Center. You will investigate, contain, and remediate security incidents across endpoints, identities, networks, and cloud environments, leveraging SIEM, XDR, and EDR tools.

You will drive automation to accelerate investigations while maintaining human oversight. Ideal candidates have 5+ years in IT/security, strong incident response methodologies, and experience with cloud platforms (AWS/Azure)

Qualifications

• Four-year college degree, or equivalent years' of relevant experience, required.
• Certifications in incident response (GCIH, SANS) or security (CISSP, CCSP) preferred.

Responsibilities

• Analyze, investigate, document, contain, remediate, and coordinate response to cybersecurity incidents.
• Serve as escalation point for security events requiring deeper analysis and response.
• Develop, test, tune, and improve detection logic and analytics.
• Identify opportunities to automate enrichment, evidence collection, and containment actions.
• Develop and maintain incident response playbooks and procedures.
• Produce operational metrics and reporting related to incident response and SOC performance.
• Mentor team members and share knowledge to improve SOC capabilities.

Skills

Incident response

Threat hunting

Automation

Security mindset

Education

Bachelor's degree or equivalent

Tools

Palo Alto XSIAM

SIEM tools

AWS

Azure

Terraform

CloudFormation

Python

Bash

PowerShell

EDR

Windows

Linux

macOS

Job description

The Carlyle Group is seeking an experienced Incident Response Analyst to join its Security Operations Center. You will investigate, contain, and remediate security incidents across endpoints, identities, networks, and cloud environments, leveraging SIEM, XDR, and EDR tools.

You will drive automation to accelerate investigations while maintaining human oversight. Ideal candidates have 5+ years in IT/security, strong incident response methodologies, and experience with cloud platforms (AWS/Azure)