Security Operations and Incident Response Analyst

Our Security Operations (SecOps) team is seeking an experienced Security Operations and Incident Response Analyst to elevate our active defense capabilities. In this role, you will take a hands-on approach to our daily threat detection mission actively monitoring and triaging alerts while identifying creative ways to automate the security lifecycle.
This role is ideal for a seasoned analyst who has mastered the fundamentals of security monitoring and is ready to apply those insights to cloud security and detection engineering. You will be an active participant in our daily monitoring operations, using that front-line visibility to proactively tune our alerting logic, eliminate noise, and build higher-fidelity detections.
Working within a collaborative, globally distributed team, you will partner with key stakeholders, hold a significant voice in shaping our tooling, and follow a structured career progression tailored to your professional growth.
What You'll Be Doing:
Monitor & Respond - Serve as a key responder across our cloud and corporate environments, actively triaging alerts, investigating active threats, collecting evidence, and driving incidents to swift containment.
Analyze Cloud Risks - Investigate cloud-native alerts, analyzing infrastructure context and telemetry to isolate, validate, and remediate active risks.
Collaborate Cross-Functionally - Partner with internal engineering and infrastructure teams when needed to coordinate containment, remediation, and post-incident root-cause analysis.
Optimize Detections & Playbooks - Collaborate with senior engineers to tune alerting logic, suppress noise, and develop higher-fidelity detection rules, while identifying opportunities to optimize automated playbooks for alert enrichment and triage.