Senior Incident Response Analyst (Hybrid)

DocuSign, Inc.; San Francisco (CA); Hybrid; USD 146,000 - 235,000; Full time

Benefits offered by this job

Bonus

RSUs

Health benefits

Paid time off

Job summary

DocuSign, Inc. is seeking an experienced CSIRT Investigator to join our security team in the United States. You will identify and investigate security incidents, contribute to incident response enhancements, and participate in on-call rotations as part of an individual contributor role reporting to the Sr.

Manager of CSIRT. The role requires a strong technical background, hands-on triage, and the ability to collaborate with IT and business units while advancing threat detection and response

Qualifications

• 8+ years in cybersecurity with SOC/IR focus.
• Must be a U.S. Citizen, National or Person.
• Experience leading responses to critical cybersecurity incidents.
• Experience with SIEM for alert analysis and log correlation.
• Experience with digital forensics principles and enterprise tools.
• Experience with scripting languages (Python/PowerShell/Bash) for automation.
• Preferred: Bachelor's in CS/InfoSec or equivalent; certifications such as Security+, CySA+, GCIH, GCFA or CEH.
• Exposure to cloud security concepts (AWS/Azure/GCP).

Responsibilities

• Perform initial triage and in-depth analysis of security alerts from SIEM and monitoring tools.
• Correlate events from various log sources to identify incidents.
• Determine scope, severity and potential impact of threats.
• Conduct technical investigations and Incident Command into confirmed cybersecurity incidents.
• Utilize digital forensics techniques to gather evidence and understand timelines.
• Support containment, eradication and recovery efforts.
• Document incident findings, actions taken and lessons learned.
• Assist in developing and refining threat detection rules.
• Participate in proactive threat hunting to uncover hidden threats.
• Stay informed about latest threat intelligence and attack techniques.
• Work with SIEM and SOAR platforms to optimize alert processing.
• Contribute to automated incident response and reporting solutions.
• Identify opportunities for automation; collaborate with security teams and IT.

Skills

SOC

Incident Response

SIEM

EDR

Forensics

Scripting

Crisis Management

US Citizenship

Education

Bachelor's degree in CS/InfoSec or related field

Tools

SIEM tools (Splunk/QRadar/Sentinel)

EDR solutions

Job description

DocuSign, Inc. is seeking an experienced CSIRT Investigator to join our security team in the United States. You will identify and investigate security incidents, contribute to incident response enhancements, and participate in on-call rotations as part of an individual contributor role reporting to the Sr.

Manager of CSIRT. The role requires a strong technical background, hands-on triage, and the ability to collaborate with IT and business units while advancing threat detection and response