Cybersecurity Incident Response Specialist Technical Operations Atlanta, Georgia

Geotab Inc.; Atlanta (GA); Hybrid; USD 85,000 - 100,000; Full time

Job summary

Geotab Inc. is seeking a Cybersecurity Incident Response Specialist to protect its software and supply chain. This position is based in Atlanta, Georgia, and involves managing incident response across various environments, requiring strong experience in security operations and incident management.

The ideal candidate will have hands-on knowledge with tools like Elastic and CrowdStrike, and the ability to work independently. This permanent, full-time role supports a hybrid work model.

Qualifications

• 3–5 years of experience in an Incident Response or Security Operations role.
• Hands-on experience with Elastic, CrowdStrike, and SQL.
• Familiarity with GCP, AWS, Azure, or Oracle cloud.

Responsibilities

• Own incident response operations for Geotab's environments.
• Proactively monitor and respond to security incidents.
• Conduct log analysis across web applications.

Skills

Incident Response

Security Operations

Log Analysis

Malware Analysis

Cloud Security

Python

PowerShell

Bash

Communication

Education

Post-secondary diploma or degree in Computer Science or related field

Tools

Elastic

CrowdStrike

SQL

Splunk

QRadar

Job description

Overview

Geotab ® is a global leader in IoT and connected transportation and certified “Great Place to Work™.” We are a company of diverse and talented individuals who work together to help businesses grow and succeed, and increase the safety and sustainability of our communities.

Basis: Permanent Full Time

Location: Atlanta, Georgia

Who you are

Geotab is seeking a Cybersecurity Incident Response Specialist who will be responsible for protecting Geotab's software, hardware, and supply chain by leading incident response efforts across government-compliant and commercial environments. If you love investigative security work, thrive in fast-moving environments, and are keen to join an industry leader — we would love to hear from you!

What you’ll do

• Own incident response operations for Geotab's government compliance environments.
• Proactively monitor, triage, and lead response efforts for security incidents.
• Conduct log analysis across web applications and leverage tools including Elastic and CrowdStrike.
• During lower-incident periods, lead threat hunts and strategic IR project work to improve security posture.
• Participate in an on-call rotation with dedicated coverage for US-specific incidents.

How you’ll make an impact

• Proactively monitor, evaluate, and track systems and networks for breaches to Geotab's security, products, and customers.
• Identify security flaws and vulnerabilities and utilize metrics for evaluating risks (e.g., CVSS).
• Ensure that Geotab's compliance requirements are met (e.g., NIST 800-53 & NIST 800-171), with focus on FedRAMP and CONUS environments.
• Perform security audits, risk analysis, network forensics, and penetration testing to reduce attack surface.
• Perform malware analysis and reverse engineering to develop procedural responses.
• Establish security gap assessments, policies, procedures, playbooks, training, and tabletop testing.
• Establish protocols for communicating security incidents with customers, internal stakeholders, and law enforcement.
• Remediate security breaches in a timely manner and provide expert SME guidance to internal teams.

What you’ll bring to the role

• Post-secondary diploma or degree in Computer Science, Engineering, or related field.
• 3–5 years of experience in an Incident Response or Security Operations role.
• Hands-on experience with Elastic, CrowdStrike, and SQL; scripting in Python, PowerShell, and Bash; familiarity with Splunk, QRadar, or other SIEM tools is a strong asset.
• Experience in GCP environments (primary); AWS, Azure, or Oracle cloud familiarity is an asset.
• CCSP certification desired; CISSP and SANS certifications are a plus — strong hands-on experience will be considered over certifications alone.
• Strong communication skills with the ability to work independently in a remote or hybrid environment (Atlanta or remote; hybrid if Atlanta-based).
• Willingness to participate in on-call incidents.

To be eligible, candidates must have continuously resided in the continental United States for at least three years immediately preceding their application. Successful applicants will be required to provide verifiable documentation of continuous lawful residency. Some exceptions apply to US citizens.

Ability to pass an enhanced background check, including a drug screening test (if applicable) and a credit check.

Please note: Geotab does not accept agency resumes and is not responsible for any fees related to unsolicited resumes. Please do not forward resumes to Geotab employees.

Equal opportunity

Geotab provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, sex, national origin, age, disability or genetics. Geotab complies with applicable state and local laws governing nondiscrimination in employment. Geotab expressly prohibits any form of workplace harassment or discrimination based on race, color, religion, gender, sexual orientation, gender identity or expression, national origin, age, genetic information, disability, or veteran status. For more information about our EEO program or to file a complaint, please contact our EEO officer at [e-mail].

Geotab is committed to accommodating people with disabilities during the recruitment and assessment processes and when people are hired. If you require accommodation at any stage of the application process or want more information about our diversity and inclusion and accommodation policies, please contact us at [e-mail].

Geotab will not discriminate in compensation discussions. By submitting a job application to Geotab Inc. or its affiliates and subsidiaries, you acknowledge Geotab’s collection, use and disclosure of your personal data in accordance with our Privacy Policy. Click here to read our Privacy Notice.