Incident Response Analyst II

Astreya; Austin (TX); On-site; USD 70,000 - 72,000; Full time

Job summary

Astreya is hiring for an entry/early‑level incident response role in Austin, TX. You will lead and triage incidents in a 24x7 environment, escalate threats, and support investigations while coordinating with cross-functional teams. The role emphasizes documentation, compliance, and rapid decision-making under pressure.

Requirements include 0–2 years in IT or Security Ops and an associate degree, with a path to 2–4 years SOC/IR experience. Salary details are provided in the posting.

Qualifications

• Experience in managing Data center enterprise incidents (facility, noc, soc).
• 0–2 years in IT or Security Ops; associate degree or equivalent.
• 2–4 years SOC/IR experience with a data center focus.

Responsibilities

• Lead incident handling and cross‑functional responses in 24x7 operations.
• Coordinate with utilities and vendors under tight SLAs.
• Perform forensic analysis and contribute to IR strategy and run books.
• Escalate confirmed threats and provide executive-level reporting.

Skills

Incident io

Grafana

JIRA

Teleport

Confluence

Windows

Linux

firewalls

cloud logs

analytical thinking

troubleshooting

executive communication

regulatory standards

Education

Associate's degree in IT

Bachelor's degree in Information Systems

Tools

Incident io

Grafana

JIRA

Teleport

Confluence

Job description

Scope Entry-level monitoring; triages basic alerts; supports investigations. Conducts initial incident investigations, escalates confirmed threats, and updates run books. Leads incident handling, coordinates cross-functional responses, and performs forensic analysis. Oversees incident response strategy, threat hunting, red/blue teaming initiatives, and executive-level reporting.

Responsibilities

• Minimum of 3-5 years' experience in a command center, service center, or similar 24x7 operations center environment.
• Critical Power: Experience responding to failures in Uninterruptible Power Supplies (UPS), emergency generators, and Power Distribution Units (PDUs).
• Cooling & HVAC: Proven track record handling cooling loops, chillers, and Computer Room Air Conditioning (CRAC) units during thermal emergencies.
• Monitoring Tools: Hands-on experience triaging real-time alerts from Building Management Systems (BMS) and Data Center Infrastructure Management (DCIM) tools.
• Standard Operating Procedures: Following and executing Emergency Operating Procedures (EOPs) and Method of Procedure (MOP) documents.
• Vendor Management: Experience coordinating with external utility companies, fuel delivery vendors, and specialized equipment technicians under tight SLAs.

Qualifications

• Experience in managing Data center enterprise incidents. (facility, noc, soc etc.)
• Associate's degree in IT, or equivalent experience. 0-2 years in IT or Security Ops.
• Bachelor's degree in Information Systems, or Computer Science. 2-4 years SOC/IR experience.
• 3-5 years of experience in incident response in data center environment.

Required Skills

• Hands-on experience with Incident io, Grafana, Ring, JIRA, Teleport, Confluence.
• Familiarity with log sources (Windows, Linux, firewalls, cloud logs).
• Strong analytical, troubleshooting, and decision-making skills under pressure.
• Familiarity with regulatory standards (e.g., SOC 2, HIPAA, ISO 27001, NIST).
• Excellent written and verbal communication, including technical documentation.

Preferred Skills

• Active learner, methodical, eager to follow procedures, dependable.
• Analytical, responsive, detail-oriented, collaborative, capable of leading investigations.
• Strategic, able to lead IR efforts, skilled at executive communication, mentor to junior analysts.
• Visionary, able to design incident response strategy, align security with business risk, lead multi-stakeholder efforts.

Pay range and compensation package

Salary Range $70,000 to 72,000 USD Annually.

Please note that the salary information provided herein is base pay only (gross); it does not include other forms of compensation which may or may not apply to this specific position, namely, performance-based bonuses, benefits-related payments, or other general incentives - none of which are guaranteed, may be subject to specific eligibility requirements, and are wholly within the discretion of Astreya to remit. Further, the salary information noted above is a range that consists of a minimum and maximum rate of pay for this specific position. Where an applicant or employee is placed on this range will depend and be contingent on objective, documented work-related considerations like education, experience, certifications, licenses, preferred qualifications, among other factors.