Senior Incident Commander - Cyber Security Response

UKG; Boston (MA); On-site; USD 146,000 - 209,000; Full time

Job summary

UKG Inc. seeks a Senior Staff Security Analyst - Incident Commander to join its Global Security Operations team in supporting detection, investigation, response, and containment of sophisticated threats impacting UKG and its customers.

You will lead major incident command activities, coordinate technical response, and drive containment and recovery across endpoint, cloud, and identity environments. Mentoring analysts and developing incident playbooks are key focus areas.

Qualifications

• Lead complex security incidents with strategic and technical oversight.
• 5+ years of hands-on digital forensics and incident response in enterprise environments.
• Advanced knowledge across network, cloud, Windows, Linux, identity, and runtime forensics.
• Experience coordinating major cyber incident command and post-incident improvements.
• Hands-on endpoint disk/memory, cloud, and host-based forensic analysis in active incidents.
• Threat hunting experience with SIEM, EDR, cloud telemetry, identity logs, and network data.
• Experience applying GenAI-assisted workflows in investigations while maintaining strict validation.
• Ability to mentor/train analysts during investigations, hunting activities, and readiness.

Responsibilities

• Provide hands-on forensics and incident response across endpoints, memory, network, cloud, Windows, Linux, and runtime environments.
• Lead major cyber incident command activities and coordinate technical response and stakeholders.
• Perform threat hunting across SIEM, EDR, cloud, identity, network, and forensic data sources.
• Support and lead complex investigations as a technical contributor across SOC, Threat Intelligence, and other teams.
• Mentor analysts during active incidents, post-incident reviews, and tabletop exercises.
• Present incident strategies, findings, timelines, and summaries to technical and executive audiences when asked.
• Develop training materials, playbooks, and exercises for incident command and response capabilities.
• Use scripting/automation to accelerate investigations and standardize response actions.

Skills

Digital forensics

Incident response

Threat hunting

GenAI-assisted workflows

Scripting (Python/PowerShell/Bash)

Mentoring/train analysts

Executive communication

Tools

SIEM

EDR

SOAR

Cloud telemetry

Forensic tooling

Job description

UKG Inc. seeks a Senior Staff Security Analyst - Incident Commander to join its Global Security Operations team in supporting detection, investigation, response, and containment of sophisticated threats impacting UKG and its customers.

You will lead major incident command activities, coordinate technical response, and drive containment and recovery across endpoint, cloud, and identity environments. Mentoring analysts and developing incident playbooks are key focus areas.