Lead Security Incident Response Analyst (End-to-End IR)

Accendra Health; Virginia (MN); On-site; USD 57,000 - 95,000; Full time

Benefits offered by this job

Medical benefits

Paid time off

401(k) Plan

Dental and vision coverage

Life insurance

Job summary

Accendra Health is seeking a hands-on L3 Security Incident Response Analyst to own incidents end to end—from scoping to containment and recovery—while keeping leadership informed. You will lead high-severity investigations across endpoint, identity, email, network, cloud, and SaaS telemetry.

This role requires strong skills in SIEM/detection engineering, identity and access, and incident containment, with collaboration across Privacy, Compliance, and Legal to drive improved detections and

Qualifications

• 5+ years in security operations or incident response, including leading investigations.
• Expertise in SIEM/detection engineering, identity and access controls, and email security.
• Experience with EDR, network security, and incident containment decisions.

Responsibilities

• Lead high-severity investigations across endpoint, identity, email, network, cloud, and SaaS telemetry.
• Make containment decisions and coordinate eradication and recovery with stakeholders.
• Write clear incident reports and provide timely status to leadership.
• Tune detections and drive improvements to reduce false positives and dwell time.

Skills

SIEM / detection engineering

Identity and access

Email security

Endpoint

Network security

MITRE ATT&CK

Written communication

Tools

Microsoft Sentinel

Rapid7 InsightIDR

Splunk

Job description

Accendra Health is seeking a hands-on L3 Security Incident Response Analyst to own incidents end to end—from scoping to containment and recovery—while keeping leadership informed. You will lead high-severity investigations across endpoint, identity, email, network, cloud, and SaaS telemetry.

This role requires strong skills in SIEM/detection engineering, identity and access, and incident containment, with collaboration across Privacy, Compliance, and Legal to drive improved detections and