Senior Incident Response & Security Operations Lead

WGU; Salt Lake City (UT); On-site; USD 108,000 - 162,000; Full time

Benefits offered by this job

Bonuses

Medical, dental, vision

Wellbeing programs

Tuition assistance

Job summary

WGU is seeking an experienced Security Analyst to lead incident response and security operations. You will investigate security events, analyze logs, and refine detection rules while collaborating with infrastructure and risk teams. The position emphasizes cloud security awareness and automation.

The role is in-office with a swing shift at Salt Lake City, UT or Raleigh, NC, offering a comprehensive benefits package and career growth opportunities within a mission-driven university.

Qualifications

• Bachelor's degree in IT security, CS, engineering, or related field.
• 3+ years of information security experience.
• Experience analyzing SIEM, network, event, and IDS alert logs.
• Experience working with MITRE ATT&CK Framework.
• Experience designing and deploying security solutions.
• Scripting experience (Bash, Python) with automation knowledge.
• Experience with compliance and regulatory program requirements.
• Knowledge of AWS, cloud security, CI/CD security, and IaC.

Responsibilities

• Lead incident response and related security efforts, including forensics, continuous monitoring, intrusion detection, and automation.
• Investigate security events and unusual activity using SIEM, IDS/IPS, endpoint security, DLP, and other tools.
• Analyze logs and network traffic to identify malicious or anomalous behavior.
• Lead or participate in tactical response to address security risks across environments.
• Develop and refine SIEM rules and MITRE ATT&CK-aligned use cases.
• Collaborate with architects and security teams to implement detective and preventive controls.
• Document and improve incident response processes and security operations practices.

Skills

Information security experience

MITRE ATT&CK knowledge

Automation scripting (Bash, Python)

Compliance & regulatory programs

Security incident handling & forensics

Communication skills

AWS cloud security & IaC

Education

Bachelor's Degree in IT Security/related field

Tools

SIEM

IDS/IPS

Endpoint security

Firewalls

DLP

Syslog

AWS

Job description

WGU is seeking an experienced Security Analyst to lead incident response and security operations. You will investigate security events, analyze logs, and refine detection rules while collaborating with infrastructure and risk teams. The position emphasizes cloud security awareness and automation.

The role is in-office with a swing shift at Salt Lake City, UT or Raleigh, NC, offering a comprehensive benefits package and career growth opportunities within a mission-driven university.