Senior Incident Response Analyst - InfoSec
Elastic · United States
About this role
**Elastic — Senior Incident Response Analyst (InfoSec)** *Elastic, the Search AI Company, helps organizations secure and protect private information more effectively through cloud-based solutions for search, security, and observability.* ## What is the Role As a **Senior Incident Response Analyst** at Elastic, you’ll be a front-line defender helping ensure safe and secure products and services for customers, users, and fellow Elasticians. You’ll review and respond to alerts from a wide range of sources (multiple cloud providers, CI/CD environments, SaaS services, user workstations, and more). Elastic is distributed globally, so you’ll provide oversight and guidance to domain experts while supporting investigations to determine **what happened, who did it, when, and where**—and ensure the environment is secured during and after security events. ## What You Will Be Doing - Review and respond to alerts from **Elastic Detection Engine** and other monitoring sources - Provide feedback to the **Threat Detection** team to improve detection quality (false positives, enrichment opportunities, and automated response possibilities) - Conduct analysis on **SIEM and/or endpoint logs** during complex investigations - Develop and document approaches to **detect, respond to, and eradicate advanced threats** and improve **time to respond** - Identify integration points to support **event enrichment** and **automated response** - Gather additional context for security events - Identify root causes and collaborate to remediate control gaps or failures - Oversee and coordinate response activities across multiple teams and products to ensure comprehensive remediation ## What You Bring - **3+ years** of experience in security operations / incident response in a complex, global environment (SaaS and cloud experience is a plus) - Proven ability to solve complex IT/security problems through **log and system analysis** (Incident Response, SRE, System Administration) - Ability to think innovatively about solving critical security problems (AI/ML process optimization is a plus) - Experience coordinating response activities to resolve IT and security problems with the right people in a timely manner *If doing all of this with the Elastic Stack excites you, Elastic would love to talk with you.*
Listing freshness
CronJobs last confirmed this listing 2h ago. If its source stops confirming the opening for seven days, this page is removed from active inventory.