Senior Incident Response Specialist — Forensics & Containment

OpenLoop Health, Inc.; Northern (KY); Hybrid; USD 110,000 - 170,000; Full time

Benefits offered by this job

Medical, Dental, Vision plans

Flexible Spending Accounts

Flexible PTO

401(k) + Company Match

Life and Pet insurance

Job summary

OpenLoop Health, Inc. seeks a Senior Incident Response Analyst to own incidents end to end, deepen forensic capability, and ensure fast containment when PHI and clinical operations are at risk.

You will lead tier-1 and tier-2 incidents, conduct host/memory/network investigations, and write both technical timelines and executive summaries for diverse stakeholders. Join a hands-on IR team protecting care delivery at scale.

Qualifications

• 6–8 years of hands-on security experience, with the majority in incident response and/or digital forensics.
• Ownership of the full incident lifecycle from detection through post-incident review.
• Cross-functional knowledge across host, memory, network, cloud, and identity investigations.
• Hands-on fluency with EDR/EPP and SIEM for investigations and tuning.
• Proficiency with a full forensic toolchain and evidence handling for legal/regulatory scrutiny.
• MITRE ATT&CK fluency applied to real investigations.
• Scripting for investigation/automation (Python, PowerShell).
• Experience using AI tools in security work with responsible data handling.

Responsibilities

• Own tier-1 and tier-2 incidents end to end from detection to closure.
• Conduct host/memory/network/cloud/identity investigations independently.
• Analyze telemetry from EDR and SIEM and build robust timelines.
• Manage on-call rotation with containment authority within thresholds.
• Rewrite IR playbooks and lead post-incident reviews to closure.
• Automate triage and collection steps to free time for analysis.
• Produce both technical timelines and executive summaries.

Skills

Incident response

Digital forensics

EDR/SIEM

Python/PowerShell

Forensic toolchain

MITRE ATT&CK

AI tools in security

Incident writing

Tools

Velociraptor

KAPE

Volatility

Autopsy/EnCase/FTK/X-Ways

Zeek

Wireshark

Job description

OpenLoop Health, Inc. seeks a Senior Incident Response Analyst to own incidents end to end, deepen forensic capability, and ensure fast containment when PHI and clinical operations are at risk.

You will lead tier-1 and tier-2 incidents, conduct host/memory/network investigations, and write both technical timelines and executive summaries for diverse stakeholders. Join a hands-on IR team protecting care delivery at scale.