Senior Incident Response Analyst - AI-Driven SOC (Hybrid)

Carlyle Group; Washington, Northern (District of Columbia, KY); Hybrid; USD 140,000 - 160,000; Full time

Benefits offered by this job

Health insurance

Retirement benefits

Life insurance

Disability insurance

Paid time off

Paid holidays

Wellness programs

Family planning benefits

Job summary

The Carlyle Group is seeking an Incident Response Analyst for the Americas to join our Hybrid Washington, DC team. You will investigate, contain, and resolve security incidents across endpoints, identity, network, cloud, and SaaS environments, leveraging SIEM, XDR, and automation to accelerate investigations.

Ideal candidates have strong incident response foundations, experience with threat hunting, and the ability to communicate findings to technical and non-technical stakeholders.

Qualifications

• Four-year college degree, or equivalent experience.
• 5+ years IT-related experience.
• 3+ years IT security operations and incident response experience.
• Experience with digital forensics and evidence collection across cloud, network and endpoints.

Responsibilities

• Analyze, contain, remediate, and coordinate response to cybersecurity incidents across endpoints, identities, networks, clouds, and data environments.
• Serve as escalation point for complex security events requiring deeper analysis and response.
• Develop, test, tune, and improve detection logic and analytics.
• Identify opportunities to automate investigation and response activities using SOAR, APIs, and scripting.
• Develop and maintain incident response playbooks and operational procedures.

Skills

Incident response

Threat detection

Automation

Communication

Education

Four-year college degree

Security certifications (preferred)

Tools

Palo Alto XSIAM

SIEM tools

AWS/Azure

Job description

The Carlyle Group is seeking an Incident Response Analyst for the Americas to join our Hybrid Washington, DC team. You will investigate, contain, and resolve security incidents across endpoints, identity, network, cloud, and SaaS environments, leveraging SIEM, XDR, and automation to accelerate investigations.

Ideal candidates have strong incident response foundations, experience with threat hunting, and the ability to communicate findings to technical and non-technical stakeholders.