Senior Incident Commander — Cybersecurity & Forensics

UKG (Ultimate Kronos Group); Tallahassee (FL); On-site; USD 146,000 - 209,000; Full time

Benefits offered by this job

Bonus plan

Restricted stock units

Job summary

UKG is seeking a Senior Staff Security Analyst - Incident Commander to join the Global Security Operations team. You will lead incident response, perform hands-on forensics across cloud and on-premises environments, and guide investigators through containment and recovery.

You will mentor analysts, develop incident playbooks, and leverage GenAI-assisted workflows to accelerate investigations while maintaining rigorous validation and reporting to executive leadership.

Qualifications

• Lead complex security incidents and guide technical teams.
• 5+ years of hands-on digital forensics and incident response in enterprise environments.
• Advanced knowledge of forensic artifacts across network, cloud, Windows, Linux, and endpoints.
• Demonstrated experience leading cyber incident command with coordination and stakeholder updates.
• Hands-on endpoint, memory, and cloud forensics in active IR scenarios.
• Experience applying GenAI-assisted workflows to investigations while maintaining validation.
• Ability to mentor, train, and elevate analysts during investigations and readiness.
• Proficiency in scripting for automation and enrichment in investigations.
• Experience with major cloud providers in security contexts.
• Reverse engineering and malware analysis preferred.
• Hands-on experience with SIEM/EDR/SOAR tooling.

Responsibilities

• Provide hands-on digital forensics and incident response across endpoints, memory, network, cloud, Windows, and Linux.
• Lead major cyber incident command activities: coordinate response, track actions, brief stakeholders, drive containment and recovery.
• Threat hunt across SIEM, EDR, cloud telemetry, and forensic data sources, with or without GenAI assistance.
• Collaborate across SOC, Threat Intelligence, Detection Engineering, Cloud Security, andLegal teams during investigations.
• Mentor analysts during active incidents, post-incident reviews, and tabletop exercises.

Skills

Digital forensics

Incident response

Threat hunting

Scripting (Python/PowerShell/Bash)

GenAI workflows

Mentoring/training

Threat intelligence

Investigation leadership

Tools

SIEM

EDR

SOAR

Forensic tooling

Job description

UKG is seeking a Senior Staff Security Analyst - Incident Commander to join the Global Security Operations team. You will lead incident response, perform hands-on forensics across cloud and on-premises environments, and guide investigators through containment and recovery.

You will mentor analysts, develop incident playbooks, and leverage GenAI-assisted workflows to accelerate investigations while maintaining rigorous validation and reporting to executive leadership.