Incident Response Lead

Bhphotovideo; New York (NY); On-site; USD 90,000 - 120,000; Full time

Benefits offered by this job

Competitive salary

Medical benefits

401K plan

Employee discounts

Job summary

B&H is seeking an IR Analyst L3 to manage daily operations of IR alerts, triage incidents, and support the overall incident response program at its New York facilities.

The role requires hands-on experience with SIEM/EDR/DLP, strong analytical and communication skills, and the ability to lead incident response efforts across teams.

Qualifications

• Extensive knowledge of IT networking, logging and security tooling, plus ticketing systems.
• Experience with threat hunting and OS malware analysis.
• Ability to lead a collaborative security team across departments.

Responsibilities

• Monitor and respond to security events using established processes.
• Investigate root cause, scope, impact, and remediation of incidents.
• Manage daily operations of IR alerts (SIEM, EDR, DLP, FW, WAF).
• Provide direction to incident responders and analysts.
• Lead IR tools and services operations.
• Act as Incident Lead during major security events.
• Conduct IR training and exercises.
• Maintain IR documentation.
• Support the overall IR program.
• Provide monthly IR reports.

Skills

IT networking

Threat hunting

OS malware analysis

Incident response leadership

Written communication

Analytical skills

Multitasking

Incident reporting

Education

CompTIA Security+

CISSP (cert)

Tools

JIRA

HP Service Now

Remedy

SIEM

EDR

WAF

Job description

Posted Monday, August 17, 2026 at 4:00 AM

At over 50 years old and counting, B&H has built a reputation as the trusted resource for photography and videography enthusiasts via its NYC SuperStore and its award-winning website. Long known as "The Professional’s Source", B&H is recognized by savvy consumers worldwide for its honest, knowledgeable guidance, expert tips and articles… and always-great prices.

• B&H offers competitive salaries, medical benefits, a 401K plan, employee discounts and opportunities to grow within a high-energy, low-attitude environment.

Make your move to B&H today!

Job Overview:

An IR analyst L3 is responsible for the daily operations of IR alerts/tickets, triaging, investigating, and escalating security alerts and incidents, managing IR tools and services, and supporting the overall IR program. These responsibilities are designed to support the identification of and response to cyberthreats affecting B&H systems and assets in a timely manner.

• Monitor and respond to security events and incidents using established processes and tools
• Investigate the root cause, scope, impact, and remediation of security incidents
• Manage daily operations of reviewing and responding to IR alerts including but not limited to SIEM, EDR, DLP, FW, and WAF alerts.
• Provide direction and guidance to incident responders and analysts
• Manage daily operations responsibilities for the operations and support of IR tools and services.
• Act as the Incident Lead during significant security events.
• Conduct and participate in incident response training and exercises
• Upkeep and development of IR documentation
• Support the overall B&H IR program.
• Provide monthly reporting for the IR function.

Additional Responsibilities:

• Assisting with security projects, tasks, and other initiatives
• Support overall IS Security initiatives.

Specific Knowledge, Skills, and Abilities:

• Extensive knowledge of IT networking (TCP/IP, firewalls, IDS/IPS, routing, etc.), logging (syslog, auditd, window’s event log, etc.), security tooling (A/V, EDR, email security, vulnerability scanners, etc.), ticketing systems (JIRA, HP Service Now, remedy, etc.) and security principles (CIS top 18, NIST, incident response frameworks, etc.)
• Experience with threat hunting and operating system malware analysis.
• Ability to lead a collaborative team while building inter-departments support.
• Excellent communication and writing skills.
• Strong analytical and troubleshooting skills.
• Attention to detail and curiosity to learn new skills.
• Self starter and able to manage multiple competing priorities.
• Experience preparing and presenting incident reports

Preferred Education, Experience and Licenses:

• Minimum of 5 years of experience in IT/Cyber with at least 3 in Incident Response.
• Experience leading major incident response operations and 24/7 security monitoring.
• Relevant certifications, such as CompTIA Security+, CySe+, GCIH, GSOC, GMON, CEH, SSCP, or CISSP are a plus.

We are an Equal Opportunity Employer. All persons shall have the opportunity to be considered for employment without regard to their race, color, religion, national origin, ancestry, alienage or citizenship status, age, disability or handicap, sex or gender, marital status, veteran status, sexual orientation, arrest record, or any other characteristic protected by applicable federal, state or local laws.

We will endeavor to make a reasonable accommodation to the known physical or mental limitations of a qualified applicant with a disability unless the accommodation would impose an undue hardship on the operation of our business. If you believe you require such assistance to complete this form or to participate in an interview, please let us know.