Senior Security Incident Response Lead

Elastic; Mountain View (CA); Hybrid; USD 160,000 - 253,000; Full time

Benefits offered by this job

Health coverage

Flexible locations

Vacation days

Volunteer hours

Parental leave

Job summary

Elastic, the Search AI Company, is seeking a Senior Incident Response Analyst to lead front-line security operations for a global SaaS and cloud environment. You will review alerts from multiple sources, guide analysts, and drive investigations across cloud services, CI/CD environments, and endpoints.

You’ll work to reduce false positives and streamline automated responses using the Elastic Stack. You will coordinate responses across teams, identify root causes, and help remediate control gaps

Qualifications

• 3+ years in security operations / incident response in a global environment.
• Experience solving complex IT and security problems via log and system analysis (Incident Response, SRE, System Administration).
• Interest or experience optimizing processes with AI/ML is a plus.

Responsibilities

• Review alerts from Elastic Detection Engine and monitoring sources.
• Improve detections with feedback to Threat Detection team.
• Analyze SIEM and endpoint logs during investigations.
• Develop approaches to detect, respond to, and eradicate advanced threats.
• Identify integration points for enrichment and automated response.
• Gather context for security events and determine root causes.
• Coordinate multi-team response to remediate gaps in security posture.

Skills

Security operations

Incident response

Elastic Stack

AI/ML interest

Cross-team coordination

Strong communication

DoD IL5 eligibility

Tools

SIEM

Endpoint logs

Job description

Elastic, the Search AI Company, is seeking a Senior Incident Response Analyst to lead front-line security operations for a global SaaS and cloud environment. You will review alerts from multiple sources, guide analysts, and drive investigations across cloud services, CI/CD environments, and endpoints.

You’ll work to reduce false positives and streamline automated responses using the Elastic Stack. You will coordinate responses across teams, identify root causes, and help remediate control gaps