Senior Incident Command & Cyber Defense Lead

UKG; Austin (TX); On-site; USD 146,000 - 209,000; Full time

Job summary

UKG is seeking a Senior Staff Security Analyst - Incident Commander to join the Global Security Operations team. You will lead hands-on investigations, guide technical response, and drive containment and recovery across endpoints, cloud, and identity data.

This role emphasizes mentoring, learning, and producing executive-ready incident summaries for stakeholders. We value GenAI-assisted workflows, scripting in Python/PowerShell/Bash, and building durable detections with Detection Engineering and

Qualifications

• Lead complex security incidents and guide technical teams.
• 5+ years of hands-on digital forensics and incident response experience.
• Advanced knowledge of forensic artifact areas across network, cloud, Windows, Linux, endpoints.
• Experience with GenAI-assisted workflows in investigations and hunting.

Responsibilities

• Provide hands-on digital forensics and incident response across endpoints, cloud, and networks.
• Lead major cyber incident command activities and coordinate response.
• Perform threat hunting across SIEM, EDR, cloud telemetry, and logs.
• Mentor analysts during incidents, post-incident reviews, and exercises.
• Develop incident strategies, investigations, and executive-ready summaries.

Skills

Threat Hunting

GenAI workflows

Python scripting

PowerShell

Bash

Incident Command

SOC operations

Forensic analysis

Tools

SIEM

EDR

SOAR

Cloud security platforms

Job description

UKG is seeking a Senior Staff Security Analyst - Incident Commander to join the Global Security Operations team. You will lead hands-on investigations, guide technical response, and drive containment and recovery across endpoints, cloud, and identity data.

This role emphasizes mentoring, learning, and producing executive-ready incident summaries for stakeholders. We value GenAI-assisted workflows, scripting in Python/PowerShell/Bash, and building durable detections with Detection Engineering and