Lead Incident Response Analyst II — Security Ops

Western Governors University; Raleigh (NC); On-site; USD 108,000 - 162,000; Full time

Benefits offered by this job

Tuition discount

Wellbeing program

Retirement plan

Flexible PTO

Paid holidays

Parental leave

Job summary

Western Governors University is seeking an IT Security Analyst II to join our in-office team in Raleigh or Salt Lake City. You will apply current security methods to safeguard applications, systems, and networks while collaborating with infrastructure and business teams.

In this role you’ll focus on incident response, security operations, and continuous improvement across digital forensics, cloud security, and automation.

Qualifications

• Bachelor’s degree in IT security or related field.
• 3 years of information security experience.
• Experience with MITRE ATT&CK framework.
• Experience analyzing SIEM and IDS/IPS logs.
• Scripting experience (Bash, Python) for automation.
• Experience with compliance and regulatory requirements.
• Experience designing and deploying security solutions.
• Knowledge of IAM, encryption, and incident handling.

Responsibilities

• Lead incident response and security operations activities.
• Investigate security events using SIEM, IDS/IPS, and related tools.
• Analyze logs, network traffic, and telemetry for anomalies.
• Coordinate with teams to address identified security risks.
• Develop SIEM rules and use cases aligned with MITRE ATT&CK.
• Collaborate with architects and security specialists to implement controls.
• Improve incident response practices through documentation and automation.

Skills

Incident response

Security operations

MITRE ATT&CK

SIEM

IDS/IPS

Automation scripting

Endpoint security

Cloud security

Forensics

Threat detection

Communication skills

Education

Bachelor's in IT Security

Tools

SIEM tools

IDS/IPS

DLP

HIPS

Firewalls

EPP

Syslog

Job description

Western Governors University is seeking an IT Security Analyst II to join our in-office team in Raleigh or Salt Lake City. You will apply current security methods to safeguard applications, systems, and networks while collaborating with infrastructure and business teams.

In this role you’ll focus on incident response, security operations, and continuous improvement across digital forensics, cloud security, and automation.