Senior Incident Commander: Cybersecurity Forensics Lead

UKG (Ultimate Kronos Group); Springfield (IL); On-site; USD 146,000 - 209,000; Full time

Job summary

UKG is seeking a Senior Staff Security Analyst - Incident Commander to join its Global Security Operations team. You will investigate, contain, and resolve sophisticated cyber threats across endpoints, cloud, and identity, while coordinating technical response and guiding investigations.

The role emphasizes hands-on forensics, threat hunting, and mentoring analysts in incident response lifecycles. You will leverage GenAI-assisted workflows to streamline investigations, develop playbooks, and

Qualifications

• Hands-on IR and forensics experience across endpoints, network, cloud, and identity.
• Proven ability to lead major cyber incidents and coordinate technical teams.
• Strong scripting and automation to accelerate investigations and response.

Responsibilities

• Lead hands-on incident response across endpoints, memory, network, and cloud.
• Coordinate technical response, track actions, brief stakeholders, and drive containment.
• Threat hunt using SIEM, EDR, cloud telemetry, and forensic data.
• Mentor analysts during incidents, post-incident reviews, and drills.
• Present incident strategies and timelines to technical and executive audiences.
• Develop training materials and playbooks for incident command and IR.
• Create durable detections and response logic with Detection Engineering teams.
• Assist reverse engineering or malware analysis when needed.

Skills

Incident response

Digital forensics

Threat hunting

Scripting (Python/PowerShell/Bash)

SIEM

EDR

Cloud security

Mentoring/training

Executive communication

Job description

UKG is seeking a Senior Staff Security Analyst - Incident Commander to join its Global Security Operations team. You will investigate, contain, and resolve sophisticated cyber threats across endpoints, cloud, and identity, while coordinating technical response and guiding investigations.

The role emphasizes hands-on forensics, threat hunting, and mentoring analysts in incident response lifecycles. You will leverage GenAI-assisted workflows to streamline investigations, develop playbooks, and