Senior Cyber Incident Commander & Digital Forensics Lead

UKG (Ultimate Kronos Group); Oklahoma City (OK); On-site; USD 126,000 - 209,000; Full time

Job summary

UKG is seeking a Senior Staff Security Analyst - Incident Commander to join the Global Security Operations team. You will lead complex security incidents, perform hands-on forensics, and drive containment, recovery, and learning across enterprise environments.

You will mentor analysts, develop playbooks, and present findings to technical and executive audiences while leveraging GenAI-assisted workflows to accelerate investigations.

Qualifications

• Hands-on forensics and IR across networks, endpoints, and cloud.
• Experience coordinating large security incidents and stakeholders.
• Strong technical writing and incident reporting.
• Ability to mentor analysts during investigations.
• Experience with GenAI-assisted workflows in security.
• Proficiency with one or more major cloud providers.

Responsibilities

• Provide hands-on digital forensics and incident response across endpoint, memory, network, cloud.
• Lead major cyber incident command activities and coordinate response.
• Perform threat hunting across SIEM, EDR, cloud, identity, and network data.
• Mentor analysts during incidents and tabletop exercises.
• Develop incident strategies, plans, and executive summaries.
• Create training materials and playbooks for incident command, digital forensics, incident response, and threat hunting capabilities.

Skills

Digital forensics

Incident response

Threat hunting

Python

PowerShell

Bash

Mentoring

SOC operations

Training content

GenAI workflows

Investigation tooling

Malware analysis

Reverse engineering

Tools

SIEM

EDR

SOAR

Cloud telemetry

Case management

Forensic tools

Job description

UKG is seeking a Senior Staff Security Analyst - Incident Commander to join the Global Security Operations team. You will lead complex security incidents, perform hands-on forensics, and drive containment, recovery, and learning across enterprise environments.

You will mentor analysts, develop playbooks, and present findings to technical and executive audiences while leveraging GenAI-assisted workflows to accelerate investigations.