Senior Incident Commander, Global Security Operations

UKG (Ultimate Kronos Group); Baton Rouge (LA); On-site; USD 146,000 - 209,000; Full time

Job summary

UKG seeks a Senior Staff Security Analyst - Incident Commander to join its Global Security Operations team in Baton Rouge. You will lead complex security incidents, coordinate cross-functional response, and drive containment and recovery across endpoints, cloud, and networks.

You will mentor analysts, develop playbooks, and translate findings into durable detections with Detection Engineering and Threat Intelligence collaboration. Strong scripting and GenAI-enabled workflows are required.

Qualifications

• 5+ years of direct hands-on digital forensics and incident response experience.
• Advanced knowledge of forensic artifact areas across network, cloud, Windows, Linux, endpoint, identity, and runtime environments.
• Experience leading or supporting major cyber incident command and post-incident improvement activities.
• Hands-on threat hunting using SIEM, EDR, cloud telemetry, identity logs, network data, and forensic artifacts.
• GenAI-assisted workflows to investigation, summarization, hunting development, scripting, or analyst enablement.

Responsibilities

• Lead major cyber incident command activities, coordinating technical response and stakeholder updates.
• Provide hands-on digital forensics and incident response across endpoints, cloud, and network.
• Perform threat hunting across SIEM, EDR, cloud, identity, and forensic data sources.
• Mentor and train analysts during incidents, tabletop exercises, and proactive hunting engagements.
• Develop and maintain incident playbooks, procedures, and training materials.

Skills

Incident response

Digital forensics

Threat hunting

GenAI workflows

Scripting

SOC operations

Executive communication

Mentoring

Cloud environments

Tools

SIEM

EDR

SOAR

Cloud security tools

Job description

UKG seeks a Senior Staff Security Analyst - Incident Commander to join its Global Security Operations team in Baton Rouge. You will lead complex security incidents, coordinate cross-functional response, and drive containment and recovery across endpoints, cloud, and networks.

You will mentor analysts, develop playbooks, and translate findings into durable detections with Detection Engineering and Threat Intelligence collaboration. Strong scripting and GenAI-enabled workflows are required.