Security Analyst, Incident Response

This role involves performing in-depth analysis of security alerts and incidents across the enterprise and SpyCloud products. Responsibilities include creating incident response runbooks, contributing to the creation and tuning of detection rules and automated incident handling functions, and continually evaluating and enhancing incident response capabilities through process improvements and automation. The analyst will also perform threat hunting exercises and contribute to onboarding new security data sources. Occasional after-hours work may be required to support incident response efforts.