Senior Security Ops Analyst — Incident Response

MathWorks; Natick (MA); Hybrid; USD 120,000 - 190,000; Full time

Job summary

MathWorks in Natick, MA is seeking a Senior Security Operations Analyst to lead investigations, containment, remediation, and post-incident reviews across enterprise systems, cloud, endpoints, and SaaS.

The role emphasizes threat hunting, improving monitoring, automation, and collaboration with IT teams, with a hybrid schedule (3 days in Natick, 2 days remote). Requires strong judgment, analytics, and on-call participation.

Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, Information Systems, Engineering, or a related field; equivalent professional experience considered.
• Strong understanding of incident response methodologies, attack lifecycles, and adversary behaviors.
• Excellent communication and documentation skills with the ability to explain technical findings to technical and business audiences.

Responsibilities

• Lead security investigations, coordinate incident response, and drive containment, remediation, and post-incident reviews.
• Perform threat hunting, develop detections, enhance alerting logic, and validate threat exposures using intelligence and telemetry.
• Assess vulnerabilities, attack paths, security control gaps, and other technical exposures, prioritizing remediation based on risk.
• Develop and improve security tooling, automation, integrations, observability, dashboards, and investigation workflows.
• Maintain and enhance runbooks, playbooks, escalation procedures, response processes, and operational metrics.
• Provide technical leadership, security guidance, mentoring, project support, and stakeholder consultation across technology teams.

Skills

Incident response

Threat hunting

Automation

Communication

Education

Bachelor's degree in Cybersecurity/CS/IS/Engineering

Job description

MathWorks in Natick, MA is seeking a Senior Security Operations Analyst to lead investigations, containment, remediation, and post-incident reviews across enterprise systems, cloud, endpoints, and SaaS.

The role emphasizes threat hunting, improving monitoring, automation, and collaboration with IT teams, with a hybrid schedule (3 days in Natick, 2 days remote). Requires strong judgment, analytics, and on-call participation.