Description
WGU is seeking a Senior Incident Response Analyst to join our Security Operations Center (SOC) team. As a Senior Incident Response Analyst, you will help protect WGU's systems and data by leading advanced incident response and threat detection activities across multiple platforms and environments.
Responsibilities:
- Lead security incident investigations from initial triage through remediation and closure.
- Perform advanced threat detection, analysis, and response across multi-platform environments.
- Investigate suspicious activity using SIEM, EDR, network, and other security tools.
- Develop and tune SIEM alerts, detection rules, and dashboards to improve incident detection and response.
- Conduct threat hunting and research emerging threats to identify and address potential risks.
- Partner with engineering and IT teams to drive incident remediation, harden configurations, and strengthen security controls.
- Support vulnerability management, security audits, compliance initiatives, and risk assessments.
Requirements:
- 5+ years in security operations
- Hands-on SIEM expertise, including content development
- Experience with CrowdStrike or Carbon Black (EDR), Mimecast, and vulnerability management tools
- Working knowledge of the MITRE ATT&CK framework and cloud security principles
- Python or Bash scripting for automation and workflow improvement
- Strong communicator who can brief leadership and work across non-security teams
- Bachelor's degree in IT Security, Computer Science, or related field, or equivalent experience
Benefits:
- Competitive salary ($130,900 - $196,300 per year)
- Medical, dental, vision, telehealth and mental healthcare
- Health savings account and flexible spending account
- Basic and voluntary life insurance
- Disability coverage
- Accident, critical illness and hospital indemnity supplemental coverages
- Legal and identity theft coverage
- Retirement savings plan
- Wellbeing program
- Discounted WGU tuition
- Flexible paid time off
- 11 paid holidays
- Up to 12 weeks of parental leave