Lead Security Analyst, Cloud & Endpoint Incident Response

Who you are

You are an experienced security professional with a strong background in incident response and security operations — you have a proven track record of managing high-severity security incidents and leading investigations across cloud and endpoint environments. With at least 5 years of experience in security analysis, you are comfortable working with AWS and have a deep understanding of threat intelligence and vulnerability management. You thrive in high-pressure situations and can effectively communicate complex security issues to both technical and non-technical stakeholders.

You possess a strong analytical mindset and are skilled at correlating data from various sources to reconstruct attacker activity — your expertise allows you to assess emerging threats and quickly determine their relevance to your organization. You are proactive in your approach to security, always looking for ways to improve detection and response capabilities. You enjoy mentoring junior team members and fostering a culture of continuous improvement within your team.

Desirable

Experience with endpoint security solutions and identity management is a plus — familiarity with SaaS security practices will also enhance your ability to lead investigations across diverse environments. You may have certifications such as CISSP, CISM, or AWS Certified Security Specialty, which demonstrate your commitment to the field and your expertise in security best practices.

What you'll do

In this role, you will lead and execute high-severity security incidents across AWS, endpoints, identity, and SaaS environments — you will drive incidents from initial signal through scoping, containment, eradication, recovery, and post-incident review. Your responsibilities will include tracking emerging threats, assessing their relevance, and translating threat intelligence into actionable containment guidance and detection updates. You will also be responsible for producing clear incident documentation, including timelines and findings, to ensure that lessons learned are captured and shared with the team.

You will collaborate closely with other security analysts and engineers to enhance the overall security posture of the organization — your leadership will be crucial in developing and implementing incident response plans that are effective and scalable. You will also engage with external partners, such as vendors and threat intelligence providers, to stay informed about the latest security trends and vulnerabilities.

What we offer

At HubSpot, you will be part of a dynamic team that values innovation and collaboration — we offer a flexible remote work environment that allows you to balance your professional and personal life. You will have access to ongoing training and development opportunities to further enhance your skills and advance your career. Our culture promotes diversity and inclusion, and we encourage you to apply even if your experience doesn't match every requirement. Join us in making a meaningful impact in the world of security.