Incident Response Analyst — On-Site 4 Days/Week

1P284 THE CARLYLE GROUP EMPLOYEE CO., LLC; Washington (District of Columbia); On-site; USD 140,000 - 160,000; Full time

Benefits offered by this job

Retirement benefits

Health insurance

Life insurance and disability

Paid time off

Job summary

The Carlyle Group is seeking an experienced Incident Response Analyst to join our SOC and protect financial data across on-prem and cloud environments. You will investigate, contain, and remediate security incidents, leveraging SIEM, XSIAM, EDR, and threat intelligence, while driving automation and playbook improvements.

You will own incidents end-to-end, communicate findings to stakeholders, and contribute to ongoing threat hunting and detection engineering in a fast-paced, security-driven

Qualifications

• Four-year college degree or equivalent years’ of relevant experience.
• 5+ years of IT-related experience; 3+ years in IT security operations and incident response.
• Experience with digital forensics and evidence collection techniques in various environments.
• Strong communication and collaboration skills with technical and business stakeholders.
• Ability to prioritize tasks, manage multiple incidents concurrently, and work under pressure.

Responsibilities

• Security Incident Response: analyze, investigate, document, contain, remediate, and coordinate response across endpoints, identity, network, cloud, SaaS, and data environments.
• Maintain ownership of incidents through resolution and documentation.
• Serve as escalation point for security events referred by MSSP requiring deeper analysis or response.
• Correlate telemetry across multiple platforms to determine scope, root cause, and impact.
• Develop, test, tune, and improve detection logic and analytics for threats.
• Identify opportunities to automate investigations and response using scripting, APIs, SOAR, and automation platforms.
• Develop, maintain incident response playbooks and procedures.
• Develop operational metrics and reporting related to incident response and SOC performance.

Skills

SOAR platforms

SIEM

Cloud security

IaC

Python

Threat hunting

Incident response

Education

Four-year college degree or equivalent experience

Tools

Palo Alto XSIAM

AWS/Azure

Terraform

CloudFormation

Job description

The Carlyle Group is seeking an experienced Incident Response Analyst to join our SOC and protect financial data across on-prem and cloud environments. You will investigate, contain, and remediate security incidents, leveraging SIEM, XSIAM, EDR, and threat intelligence, while driving automation and playbook improvements.

You will own incidents end-to-end, communicate findings to stakeholders, and contribute to ongoing threat hunting and detection engineering in a fast-paced, security-driven