Senior Incident Response Lead - Cloud & SIEM Expert

VulnU; United States; On-site; USD 133,000 - 211,000; Full time

Benefits offered by this job

16 weeks parental leave

Retirement match

Stock program

Job summary

Elastic in the United States is seeking a Senior Incident Response Analyst to be on the front lines of security, reviewing and responding to alerts across cloud, SaaS, CI/CD and endpoints. You will lead investigations, identify root causes, and guide remediation with cross-functional teams.

You will leverage the Elastic Stack, SIEM analytics, and automation to improve detection, response speed, and overall security posture for Elastic's products and customers.

Qualifications

• 3+ years of experience in security operations / incident response in a complex, global environment.
• Experience with SIEM / log analysis during investigations.
• Experience coordinating response activities across teams to remediate gaps.
• Eligible to work in DoD Impact Level 5+ cloud environments.

Responsibilities

• Review and respond to alerts from various sources including cloud, SaaS, and endpoints.
• Lead investigations to determine root cause and remediation steps.
• Develop and document innovative detection and response approaches.
• Coordinate multi-team response to ensure comprehensive remediation.

Skills

Incident response

Cloud security

SIEM analysis

Communication

Elastic Stack

Tools

Elastic Stack

SIEM

Job description

Elastic in the United States is seeking a Senior Incident Response Analyst to be on the front lines of security, reviewing and responding to alerts across cloud, SaaS, CI/CD and endpoints. You will lead investigations, identify root causes, and guide remediation with cross-functional teams.

You will leverage the Elastic Stack, SIEM analytics, and automation to improve detection, response speed, and overall security posture for Elastic's products and customers.