Staff CSIRT Analyst

📋 Description

• Lead the identification, triage, and validation of security incidents through various telemetry
• Drive organizational incident readiness by designing and executing practical response exercises
• Partner with engineering, product security, and detection engineering teams to tune existing
• Collaborate closely with the Offensive Security team to identify visibility gaps and ensure proper
• Lead cross-functional Post-Incident Reviews (PIRs) to extract critical lessons learned; own the
• Develop and present comprehensive reports and "lessons learned" to stakeholders at all levels

🎯 Requirements

• 8+ years of experience in Incident Response, SOC Operations, or Digital Forensics (DFIR).
• Advanced knowledge of EDR/MDR platforms, log aggregation (SIEM/ELK), and cloud security
• Proven ability to articulate the root cause of complex problems using first principles and
• Experience leading small project teams and aligning tech stacks across functions.
• Exceptional ability to convey complex technical incident details to both technical teams and
• Familiarity with automation/SOAR platforms and documentation tools like Confluence, Jira, and Lucid

🎁 Benefits

• 100% remote work environment - since our founding in 2015
• Generous paid time off policy, including vacation, sick time, and paid holidays
• 12 weeks of paid parental leave
• Highly competitive and comprehensive medical, dental, and vision benefits plans
• 401(k) with a 5% contribution regardless of employee contribution
• Life and Disability insurance plans