Senior Incident Response Analyst

Who you are

You have 5+ years of experience in incident response and security operations, demonstrating a strong understanding of threat detection and mitigation strategies. Your expertise in tools like Elasticsearch and AWS allows you to effectively analyze and respond to security incidents across diverse environments. You are proficient in Linux and have a solid foundation in Python, enabling you to automate tasks and streamline processes. You thrive in collaborative settings, working closely with domain experts to ensure a secure environment. Your analytical mindset helps you identify patterns and anomalies in data, contributing to proactive security measures. You are passionate about staying updated on the latest security trends and technologies, continuously enhancing your skills to better protect your organization.

Desirable

Experience with Docker and container security is a plus, as it complements your existing skill set. Familiarity with CI/CD environments and SaaS services will further enhance your ability to respond to incidents effectively. You understand the importance of compliance and regulatory requirements in the security landscape, ensuring that your responses align with industry standards.

What you'll do

As a Senior Incident Response Analyst at Elastic, you will be on the front lines of security, responsible for reviewing and responding to alerts generated from various sources, including cloud providers and user workstations. You will lead investigations into security incidents, determining the scope and impact while coordinating with other teams to implement remediation strategies. Your role will involve providing oversight and guidance to domain experts, ensuring that incident response practices are followed consistently across the organization. You will analyze security events to identify trends and develop recommendations for improving security posture. Additionally, you will participate in post-incident reviews, documenting findings and lessons learned to enhance future response efforts. Your contributions will help shape the incident response strategy, ensuring that Elastic continues to deliver safe and secure products to its customers.

What we offer

Elastic offers a dynamic work environment where you can grow your skills and make a significant impact on the security of our products. You will have access to ongoing training and professional development opportunities, allowing you to stay at the forefront of the security field. We value collaboration and encourage you to share your insights and expertise with the team. Our culture promotes innovation and creativity, empowering you to propose new ideas and solutions. We also offer competitive compensation and benefits, ensuring that you are rewarded for your contributions to our mission of securing data and delivering exceptional services to our clients.