Senior Incident Response Engineer - Remote-Ready Defender

Elasticsearch B.V.; United States; Remoto; USD 133.000 - 211.000; Tempo pieno

Vantaggi offerti da questo lavoro

Health coverage

Flexible locations & schedules

Generous vacation days

401k matching

Volunteer time

Parental leave (16 weeks)

Donation matching up to $2000

Descrizione del lavoro

Elastic is seeking a Senior Incident Response Analyst to defend our global environment. You will review alerts, investigate complex incidents, and drive improved detections and automated responses.

You will coordinate across teams, gather context, and identify root causes to strengthen security posture across cloud and SaaS environments. The role emphasizes distributed work, flexible locations, and ongoing collaboration with Threat Detection and Security teams, with a focus on scalable incident

Competenze

• 3+ years in security operations / incident response in a global, SaaS/cloud environment.
• Ability to analyze logs and systems to resolve security events.
• Experience with the Elastic Stack is a plus.
• Interest in AI/ML to optimize security processes is beneficial.
• Proven coordination of cross-team incident response efforts.
• Strong communication skills and independent decision making.
• Eligible to work in DoD IL5+ cloud service environments.

Mansioni

• Review and respond to alerts from Elastic Detection Engine and other sources.
• Provide feedback to improve detections and automate responses.
• Analyze SIEM and endpoint logs during complex investigations.
• Develop approaches to detect, respond to, and eradicate advanced threats.
• Identify integration points for enrichment and automated responses.
• Gather context for security events and identify root causes.
• Coordinate multi-team response to ensure thorough remediation.
• Lead remediation efforts to close security gaps and strengthen posture.

Conoscenze

Security Operations

Cloud Experience

Log Analysis

Incident Response

Elastic Stack

AI/ML

Coordination

Communication

DoD IL5

Descrizione del lavoro

Elastic is seeking a Senior Incident Response Analyst to defend our global environment. You will review alerts, investigate complex incidents, and drive improved detections and automated responses.

You will coordinate across teams, gather context, and identify root causes to strengthen security posture across cloud and SaaS environments. The role emphasizes distributed work, flexible locations, and ongoing collaboration with Threat Detection and Security teams, with a focus on scalable incident