Incident Response Analyst

Corteva Agriscience; Johnston (IA); On-site; USD 100,000 - 150,000; Full time

Benefits offered by this job

Health benefits for you and yourfamily

Paid time off

Parental leave

Tuition reimbursement

Retirement plan

Career development opportunities

Job summary

Corteva Agriscience is seeking an experienced Incident Response Analyst to join the Vylor security team in Johnston, IA. You will investigate security alerts, conduct threat analysis, coordinate containment and remediation, and help strengthen security posture in a fast-paced environment.

The ideal candidate has 6+ years in cybersecurity, strong knowledge of MITRE ATT&CK, SIEM/EDR, and cloud security, with hands-on incident response experience. US-based applicants encouraged to apply.

Qualifications

• 6+ years of experience in cybersecurity or a related field with security operations, incident response, or forensics.
• Certifications such as GCIH, GCFA, GCIA, Security+, CySA+, CISSP, or equivalent experience.
• Hands-on experience investigating and responding to security incidents.
• Strong understanding of attack techniques, MITRE ATT&CK, and threat actor behaviors.
• Experience with SIEM/EDR, cloud security, and identity governance.
• Ability to analyze logs and telemetry and communicate findings clearly.

Responsibilities

• Monitor, triage, investigate, and respond to cybersecurity incidents and alerts.
• Conduct investigations across endpoints, identities, cloud environments, networks, and SaaS.
• Perform incident scoping, root-cause analysis, and impact assessments.
• Identify indicators of compromise and analyst techniques; support containment and recovery.
• Analyze logs, telemetry, and network data; investigate anomalous user activity.
• Collaborate with IT, Engineering, HR, Legal, Compliance on cross‑functional incidents.
• Document investigations, timelines, evidence, and remediation actions.

Skills

Incident response

Threat analysis

MITRE ATT&CK

SIEM

EDR/XDR

Cloud security

Education

Bachelor's degree in IT/Cybersecurity

Tools

CrowdStrike

Microsoft Defender

SentinelOne

AWS

Azure

GCP

Job description

Join Vylor—Powering the Future of Agriculture

At Vylor, we’re advancing agriculture through breakthrough science—combining elite germplasm, cutting-edge biotech, and next-generation expertise in gene editing and molecular breeding. Our portfolio includes trusted industry brands like Pioneer®, Brevant®, and Hoegemeyer®, delivering performance farmers rely on.

Join us to help scale innovation globally and shape what’s next in crop science.

Who are we and what do we do?

Corteva Agriscience intends to separate into two independent companies on or about October 1, 2026. It is Corteva’s current intention, that this position will align with the Seed Company, Vylor, at the time of the intended separation.

The Vylor innovation engine will be anchored in the agriculture industry’s most elite germplasm and transformative biotech. The company will leverage its next generation scientific expertise in disciplines like gene editing and molecular breeding to further strengthen its core business while exploring opportunities to expand to new row crops – and potentially beyond. Vylor will scale these innovations using its leading routes-to-market and by significantly expanding its licensing business.

As an Incident Response Analyst , you will play a key role in Vylor's detection and response capabilities. You will investigate security alerts and incidents, perform threat analysis, coordinate containment and remediation activities, and help strengthen our overall security posture. The Incident Response Analyst is a trusted investigator and responder within the Vylor security team who helps the organization quickly distinguish real threats from noise and turn lessons learned into stronger security controls and detections.

The ideal candidate is naturally curious, analytical, and comfortable operating in a fast‑paced environment where every investigation may present a new challenge. Experience with Insider Threat detection, response, and investigations is highly valued. Candidates with a background identifying and investigating malicious or negligent insider activity, unusual user behavior, data exfiltration, compromised accounts, or inappropriate access to sensitive information are strongly encouraged to apply.

Primary Responsibilities - How will you help us Grow!

• Monitor, triage, investigate, and respond to cybersecurity incidents and security alerts.

• Conduct investigations across endpoints, identity systems, cloud environments, network infrastructure, SaaS applications, and other enterprise systems.

• Perform incident scoping, root-cause analysis, and impact assessments.

• Identify indicators of compromise (IOCs), attacker techniques, and suspicious patterns of activity.

• Lead or support containment, eradication, and recovery activities.

• Analyze logs, endpoint telemetry, authentication activity, network traffic, and other forensic evidence.

• Investigate potentially malicious, compromised, or anomalous user activity.

• Support insider threat investigations, including suspected data exfiltration, unauthorized access, policy violations, credential misuse, and other suspicious employee or contractor activity.

• Collaborate with IT, Engineering, HR, Legal, Compliance, and other stakeholders when incidents require cross‑functional response.

• Document investigations, findings, timelines, evidence, and remediation actions clearly and accurately.

• Develop and improve incident response playbooks, procedures, and investigative processes.

• Identify opportunities to improve security detections, alerting, logging, and response automation.

• Participate in incident response exercises and post‑incident reviews.

• Stay current on emerging threats, attacker techniques, vulnerabilities, and security trends.

• Lead or support other cyber threat and incident activities, as assigned.

Experience – What you will bring to the table!

• 6+ years of experience in cybersecurity or Bachelor in an IT/Cybersecurity field with 3 years of related experience within security operations, incident response, digital forensics, threat detection, or a related field.

• Relevant certifications such as GCIH, GCFA, GCIH, GCIA, Security+, CySA+, CISSP, or equivalent experience.

• Hands‑on experience investigating and responding to security incidents.

• Strong understanding of common attack techniques, tactics, and procedures; familiarity with MITRE ATT&CK and common threat actor behaviors.

• Understanding of identity providers, authentication protocols, and privileged access management; experience working with SIEM, EDR/XDR, identity, network, cloud, or security monitoring technologies.

• Strong analytical and investigative skills with an ability to connect seemingly unrelated pieces of evidence; understanding of user and entity behavior analytics (UEBA).

• Experience analyzing logs and security telemetry to determine the scope and impact of an incident; experience with scripting or automation using Python, PowerShell, or similar languages.

• Ability to prioritize multiple investigations and operate effectively during high‑severity incidents.

• A methodical approach to evidence collection, documentation, and investigation.

• Experience with investigations in one or more of the areas of data loss prevention, data filtration, compromised account, identity, and cloud security is preferred.

• Experience with EDR/XDR platforms (CrowdStrike, Microsoft Defender, SentinelOne) and cloud platforms (AWS, Azure, GCP) preferred.

• Strong written and verbal communication skills.

• Results driven; ability to successfully navigate challenging opportunities to meet objectives and deadlines.

• Strong attention to detail and ability to quickly adapt to changing needs.

• Ability to solve complex problems with minimal guidance.

• Effective collaborator; encourages novel approaches to solving problems.

Benefits – How We’ll Support You:

• Numerous development opportunities offered to build your skills

• Be part of a company with a higher purpose and contribute to making the world a better place

• Health benefits for you and your family on your first day of employment

• Four weeks of paid time off and two weeks of well‑being pay per year, plus paid holidays

• Excellent parental leave which includes a minimum of 16 weeks for mother and father

• Future planning with our competitive retirement savings plan and tuition reimbursement program

• Learn more about our total rewards package here - Corteva Benefits (https://hrportal.ehr.com/LinkClick.aspx?fileticket=2Nre68t3vrs%3d&portalid=351)

• Check out life at Vylor! https://www.linkedin.com/company/vylorgenetics/

Are you a good match? We seek applicants from all backgrounds to ensure we get the best, most creative talent on our team.

Corteva announced to separate our current advanced seed and genetics business to establish a standalone company, operating as Vylor, Inc. The process of the planned separation is anticipated to be completed the fourth quarter of 2026, subject to legal requirements and board approval. Should you accept this position, it is anticipated that, following conclusion of the separation, you would be an employee of Vylor, Inc. and your employment would be governed by Vylor, Inc. employment processes, programs, policies, and benefit plans. In that case, details of any planned changes would be provided to you by Vylor, Inc. at an appropriate time and subject to any necessary consultation processes.

Vylor is an equal opportunity employer. We are committed to embracing our differences to enrich lives, advance innovation, and boost company performance. Qualified applicants will be considered without regard to race, color, religion, creed, sex, sexual orientation, gender identity, marital status, national origin, age, military or veteran status, pregnancy related conditions (including pregnancy, childbirth, or related medical conditions), disability or any other protected status in accordance with federal, state, or local laws.

Corteva Agriscience™ is an equal opportunity employer. We are committed to boldly embracing the power of inclusion, diversity, and equity to enrich the lives of our employees and strengthen the performance of our company, while advancing equity in agriculture. Qualified applicants will be considered without regard to race, color, religion, creed, sex, sexual orientation, gender identity, marital status, national origin, age, veteran status, disability or any other protected class. Discrimination, harassment and retaliation are inconsistent with our values and will not be tolerated. If you require a reasonable accommodation to search or apply for a position, please visit:Accessibility Page for Contact Information

For US Applicants: See the ‘Equal Employment Opportunity is the Law’ poster. To all recruitment agencies: Corteva does not accept unsolicited third party resumes and is not responsible for any fees related to unsolicited resumes.