Senior Incident Response Engineer

Elastic; Oregon; Hybrid; USD 133,000 - 211,000; Full time

Benefits offered by this job

Stock program

401k match up to 6%

Health coverage

Generous vacation days

Donation matching up to $2000

Volunteer hours

Parental leave

Job summary

Elastic is seeking a Senior Incident Response Analyst to act as a frontline defender ensuring safe and secure products and services for customers and users. You’ll review alerts from cloud, CI/CD, SaaS, and endpoints, guiding incident responders and identifying root causes to secure environments during and after security events.

With 3+ years in security operations and experience with the Elastic Stack, you will help improve detections, automate responses, and collaborate across teams to

Qualifications

• 3+ years in security operations/incident response in a global environment.
• Experience analyzing logs and systems for incident response.
• Elastic Stack experience is a plus.
• Experience coordinating response activities across teams.

Responsibilities

• Review and respond to alerts from Elastic Detection Engine and other monitoring sources.
• Provide feedback to improve detections and automate responses.
• Conduct SIEM and endpoint log analysis during investigations.
• Develop approaches to detect, respond to, and eradicate advanced threats.
• Identify integration points for enrichment and automated response.
• Coordinate cross-team response activities to close gaps.

Job description

Elastic is seeking a Senior Incident Response Analyst to act as a frontline defender ensuring safe and secure products and services for customers and users. You’ll review alerts from cloud, CI/CD, SaaS, and endpoints, guiding incident responders and identifying root causes to secure environments during and after security events.

With 3+ years in security operations and experience with the Elastic Stack, you will help improve detections, automate responses, and collaborate across teams to