Security Incident Response Analyst

📋 Description

• Monitor security alerts and events across Box’s environment using SIEM and other tools.
• Lead end-to-end response to security incidents from triage to containment and recovery.
• Conduct forensic analysis of endpoints, logs, and network traffic to determine scope.
• Develop and refine incident response playbooks and procedures.
• Collaborate with Engineering, Legal, and Compliance to meet regulatory requirements.
• Identify trends in security data to surface emerging threats and improvements.

🎯 Requirements

• 3+ years of experience in security operations, incident response, or related cybersecurity.
• Hands-on experience with SIEM platforms (e.g., Splunk, Chronicle) and EDR tools.
• Proficient in log analysis, digital forensics, and network traffic analysis.
• Strong understanding of MITRE ATT&CK and applying it to investigations.
• Clear, concise communication with technical and non-technical stakeholders.
• Active pursuit or possession of relevant certifications (GCIH, GCFE, GCFA, CEH).

🎁 Benefits

• Equity and benefits available.
• Reasonable accommodations for applicants with disabilities.
• Collaborative culture with in-person teamwork.