Incident Response Analyst

Vylor, Inc.; Des Moines (IA); On-site; USD 95,000 - 135,000; Full time

Benefits offered by this job

Health benefits

Paid time off

Parental leave

Retirement plan

Tuition reimbursement

Job summary

Vylor, Inc. is seeking an experienced Incident Response Analyst to monitor, investigate, and respond to cybersecurity incidents across endpoints, identity systems, cloud, and network environments.

You will lead containment and recovery efforts, analyze logs and telemetry, and help strengthen detections and playbooks while collaborating with IT, Engineering, HR, Legal, and Compliance teams.

Qualifications

• 6+ years of experience in cybersecurity or an IT/Cybersecurity degree with 3+ years in security operations.
• Hands-on experience investigating and responding to security incidents.
• Strong knowledge of attack techniques, MITRE ATT&CK, and UEBA concepts.

Responsibilities

• Monitor, triage, investigate, and respond to cybersecurity incidents and alerts.
• Lead containment, eradication, and recovery efforts across endpoints, identity, cloud, and network.
• Document investigations, findings, timelines, and remediation actions clearly.
• Develop and improve incident response playbooks and detection capabilities.

Skills

Incident response

Threat hunting

MITRE ATT&CK

SIEM

EDR/XDR

Python/PowerShell

Cloud security

Insider threat

Education

Bachelor's in IT/Cybersecurity

Relevant certifications (GCIH/GCFA/CISSP)

Tools

CrowdStrike

Microsoft Defender

SentinelOne

AWS

Azure

GCP

Job description

Join Vylor—Powering the Future of AgricultureAt Vylor, we’re advancing agriculture through breakthrough science—combining elite germplasm, cutting-edge biotech, and next-generation expertise in gene editing and molecular breeding. Our portfolio includes trusted industry brands like Pioneer, Brevant, and Hoegemeyer, delivering performance farmers rely on.Join us to help scale innovation globally and shape what’s next in crop science.Who are we and what do we do?Corteva Agriscience intends to separate into two independent companies on or about October 1, 2026. It is Corteva’s current intention, that this position will align with the Seed Company, Vylor, at the time of the intended separation.The Vylor innovation engine will be anchored in the agriculture industry’s most elite germplasm and transformative biotech. The company will leverage its next generation scientific expertise in disciplines like gene editing and molecular breeding to further strengthen its core business while exploring opportunities to expand to new row crops – and potentially beyond. Vylor will scale these innovations using its leading routes-to-market and by significantly expanding its licensing business.As an Incident Response Analyst, you will play a key role in Vylor's detection and response capabilities. You will investigate security alerts and incidents, perform threat analysis, coordinate containment and remediation activities, and help strengthen our overall security posture. The Incident Response Analyst is a trusted investigator and responder within the Vylor security team who helps the organization quickly distinguish real threats from noise and turn lessons learned into stronger security controls and detections.The ideal candidate is naturally curious, analytical, and comfortable operating in a fast-paced environment where every investigation may present a new challenge. Experience with Insider Threat detection, response, and investigations is highly valued. Candidates with a background identifying and investigating malicious or negligent insider activity, unusual user behavior, data exfiltration, compromised accounts, or inappropriate access to sensitive information are strongly encouraged to apply.Primary Responsibilities - How will you help us Grow!Monitor, triage, investigate, and respond to cybersecurity incidents and security alerts.Conduct investigations across endpoints, identity systems, cloud environments, network infrastructure, SaaS applications, and other enterprise systems.Perform incident scoping, root-cause analysis, and impact assessments.Identify indicators of compromise (IOCs), attacker techniques, and suspicious patterns of activity.Lead or support containment, eradication, and recovery activities.Analyze logs, endpoint telemetry, authentication activity, network traffic, and other forensic evidence.Investigate potentially malicious, compromised, or anomalous user activity.Support insider threat investigations, including suspected data exfiltration, unauthorized access, policy violations, credential misuse, and other suspicious employee or contractor activity.Collaborate with IT, Engineering, HR, Legal, Compliance, and other stakeholders when incidents require cross-functional response.Document investigations, findings, timelines, evidence, and remediation actions clearly and accurately.Develop and improve incident response playbooks, procedures, and investigative processes.Identify opportunities to improve security detections, alerting, logging, and response automation.Participate in incident response exercises and post-incident reviews.Stay current on emerging threats, attacker techniques, vulnerabilities, and security trends.Lead or support other cyber threat and incident activities, as assigned.Experience – What you will bring to the table!6+ years of experience in cybersecurity or Bachelor in an IT/Cybersecurity field with 3 years of related experience within security operations, incident response, digital forensics, threat detection, or a related field.Relevant certifications such as GCIH, GCFA, GCIH, GCIA, Security+, CySA+, CISSP, or equivalent experience.Hands-on experience investigating and responding to security incidents.Strong understanding of common attack techniques, tactics, and procedures; familiarity with MITRE ATT&CK and common threat actor behaviors.Understanding of identity providers, authentication protocols, and privileged access management; experience working with SIEM, EDR/XDR, identity, network, cloud, or security monitoring technologies.Strong analytical and investigative skills with an ability to connect seemingly unrelated pieces of evidence; understanding of user and entity behavior analytics (UEBA).Experience analyzing logs and security telemetry to determine the scope and impact of an incident; experience with scripting or automation using Python, PowerShell, or similar languages.Ability to prioritize multiple investigations and operate effectively during high-severity incidents.A methodical approach to evidence collection, documentation, and investigation.Experience with investigations in one or more of the areas of data loss prevention, data filtration, compromised account, identity, and cloud security is preferred.Experience with EDR/XDR platforms (CrowdStrike, Microsoft Defender, SentinelOne) and cloud platforms (AWS, Azure, GCP) preferred.Strong written and verbal communication skills.Results driven; ability to successfully navigate challenging opportunities to meet objectives and deadlines.Strong attention to detail and ability to quickly adapt to changing needs.Ability to solve complex problems with minimal guidance.Effective collaborator; encourages novel approaches to solving problems.Benefits – How We’ll Support You:Numerous development opportunities offered to build your skillsBe part of a company with a higher purpose and contribute to making the world a better placeHealth benefits for you and your family on your first day of employmentFour weeks of paid time off and two weeks of well-being pay per year, plus paid holidaysExcellent parental leave which includes a minimum of 16 weeks for mother and fatherFuture planning with our competitive retirement savings plan and tuition reimbursement programLearn more about our total rewards package here - Corteva BenefitsCheck out life at Vylor! https://www.linkedin.com/company/vylorgenetics/Are you a good match? Apply today! We seek applicants from all backgrounds to ensure we get the best, most creative talent on our team.Corteva announced to separate our current advanced seed and genetics business to establish a standalone company, operating as Vylor, Inc. The process of the planned separation is anticipated to be completed the fourth quarter of 2026, subject to legal requirements and board approval. Should you accept this position, it is anticipated that, following conclusion of the separation, you would be an employee of Vylor, Inc. and your employment would be governed by Vylor, Inc. employment processes, programs, policies, and benefit plans. In that case, details of any planned changes would be provided to you by Vylor, Inc. at an appropriate time and subject to any necessary consultation processes.Vylor is an equal opportunity employer. We are committed to embracing our differences to enrich lives, advance innovation, and boost company performance. Qualified applicants will be considered without regard to race, color, religion, creed, sex, sexual orientation, gender identity, marital status, national origin, age, military or veteran status, pregnancy related conditions (including pregnancy, childbirth, or related medical conditions), disability or any other protected status in accordance with federal, state, or local laws.