Senior Security Incident Commander & IR Leader

UKG (Ultimate Kronos Group); Jackson (MS); On-site; USD 146,000 - 209,000; Full time

Job summary

UKG is seeking a Senior Staff Security Analyst - Incident Commander to join its Global Security Operations team. You will lead complex security incidents, coordinate technical response, and drive containment and recovery across endpoints, cloud, and networks.

The role emphasizes hands-on forensics, threat hunting, GenAI-assisted workflows, and collaboration with legal, privacy, and business stakeholders. A strong emphasis on incident leadership and technical excellence is required.

Qualifications

• 5+ years of hands-on digital forensics and incident response in enterprise environments.
• Experience leading major cyber incident command with technical coordination and stakeholder updates.
• Hands-on threat hunting using SIEM, EDR, cloud telemetry, and network data.

Responsibilities

• Lead major cyber incident command activities, coordinating technical response and containment.
• Perform hands-on keyboard investigations across endpoints, cloud, and on-premise environments.
• Mentor analysts during active incidents, post-incident reviews, and tabletop exercises.
• Develop incident strategies, plans, and technical summaries for leadership.

Skills

Incident response

Digital forensics

Threat hunting

SOCs & leadership

Python/PowerShell

GenAI-assisted workflows

Cloud security

Scripting automation

Tools

SIEM

EDR

SOAR

Job description

UKG is seeking a Senior Staff Security Analyst - Incident Commander to join its Global Security Operations team. You will lead complex security incidents, coordinate technical response, and drive containment and recovery across endpoints, cloud, and networks.

The role emphasizes hands-on forensics, threat hunting, GenAI-assisted workflows, and collaboration with legal, privacy, and business stakeholders. A strong emphasis on incident leadership and technical excellence is required.