Senior Incident Responder: End-to-End IR for Telehealth

Health Data Innovations, Inc.; Des Moines (IA); On-site; USD 140,000 - 190,000; Full time

Benefits offered by this job

Medical, Dental, Vision

Flexible PTO

401(k) + Company Match

Life & Pet Insurance

Job summary

OpenLoop’s Security Operations team protects clinical and operational systems. As a Senior Incident Response Analyst, you own incidents end to end, deepen forensic capability, and ensure fast containment when PHI and operations are on the line.

You’ll investigate with EDR, SIEM telemetry and write for technical timelines and executive summaries, while contributing to AI-assisted triage and on-call rotations.

Qualifications

• 6–8 years of hands-on security experience, focused on incident response and/or digital forensics.
• Demonstrated ownership of full incident lifecycle, from detection to post-incident review.
• Digital forensics breadth across host/disk, memory, network, cloud, and identity — from real casework.

Responsibilities

• Own tier-1 and tier-2 incidents end to end: validation, containment, eradication, recovery, reviews.
• Run host, memory, network, cloud, and identity forensics investigations independently.
• Write SQL-like queries and reconstruction timelines from log data.
• Contribute to IR playbooks and post-incident reviews with closures documented.

Skills

Incident response

Digital forensics

Scripting

MITRE ATT&CK fluency

AI tool usage

Technical writing

Education

Certifications: GCFA/GCFE/GCIH/GNFA/GCIA/GREM

Tools

Velociraptor

KAPE

Volatility

Autopsy/EnCase/FTK/X-Ways

Zeek

Wireshark

EDR/EPP tooling

Splunk

Job description

OpenLoop’s Security Operations team protects clinical and operational systems. As a Senior Incident Response Analyst, you own incidents end to end, deepen forensic capability, and ensure fast containment when PHI and operations are on the line.

You’ll investigate with EDR, SIEM telemetry and write for technical timelines and executive summaries, while contributing to AI-assisted triage and on-call rotations.