Opportunity at
ElasticSenior Incident Response Analyst - InfoSec
Elastic, known as the Search AI Company, helps users locate real-time answers from data at scale using its Search AI Platform. The company offers cloud-based solutions…
Career Tools
About This Role
Elastic, known as the Search AI Company, helps users locate real-time answers from data at scale using its Search AI Platform. The company offers cloud-based solutions for search, security, and observability deployed by over half of Fortune 500 companies. Elastic seeks a Senior Incident Response Analyst to join the organization in the United States on a full-time basis. In this position, you will act as a primary defender protecting customers,…
Job Description
Elastic, known as the Search AI Company, helps users locate real-time answers from data at scale using its Search AI Platform. The company offers cloud-based solutions for search, security, and observability deployed by over half of Fortune 500 companies.
Elastic seeks a Senior Incident Response Analyst to join the organization in the United States on a full-time basis. In this position, you will act as a primary defender protecting customers, users, and colleagues by safeguarding products and services. You will evaluate alerts coming from multiple sources, including cloud providers, SaaS platforms, CI/CD pipelines, and user workstations, while collaborating with distributed domain experts.
Responsibilities
- Review and respond to alerts generated through the Elastic Detection Engine and additional monitoring tools
- Analyze SIEM and endpoint logs during complex security investigations
- Supply feedback to the Threat Detection team to minimize false positives and enhance detection quality
- Formulate and document creative methods to detect, eradicate, and respond to advanced threats
- Determine root causes of security events and partner with various teams to remediate control gaps
- Coordinate response efforts across multiple products and teams to ensure thorough mitigation
Requirements
- At least 3 years of professional background in security operations or incident response within a complex, global setting
- Demonstrated capability to resolve intricate IT and security challenges utilizing log and system analysis
- Proven skill in coordinating response activities alongside appropriate personnel in a timely manner
- Strong communication capabilities to make sound decisions with limited information
- Eligibility to work in DoD Impact Level 5 or above cloud service environments
Qualifications
- Background working with SaaS and cloud technologies
- Experience investigating issues using the Elastic Stack
- Desire or experience to optimize security processes leveraging artificial intelligence and machine learning
Core Skills
Benefits
- Base salary ranging from USD 133,100 to 210,600 per year, with higher ranges available in select locations
- Participation in Elastic's stock program
- Company-matched 401(k) providing dollar-for-dollar matching up to 6 percent of eligible earnings
- Health insurance coverage for employees and their families in many regions
- Flexible schedules and locations for many roles
- Generous yearly vacation days
- Financial donation matching up to USD 2,000 or local currency equivalent
- Up to 40 hours per year dedicated to volunteer projects
- Parental leave providing a minimum of 16 weeks
Frequently Asked Questions
Answers are based only on the employer’s listing; where it doesn’t say, neither do we.
What is the salary range for the Senior Incident Response Analyst position?
The typical starting base salary ranges from USD 133,100 to 210,600 per year, with an alternate range of USD 159,900 to 252,900 applicable in select locations such as Seattle, Los Angeles, the San Francisco Bay Area, and the New York City Metro Area.
What are the core experience requirements for this role?
Candidates must have a minimum of 3 years of experience in security operations or incident response within a complex, global environment, along with eligibility to work in DoD Impact Level 5 or above cloud service environments.
Does the posting specify whether the job is remote?
The source posting lists the location as the United States and specifies the role as on-site, while also mentioning that many roles offer flexible schedules and locations.
Sample Interview Questions
AI-generated questions tailored to this specific role — a preview of the full practice set.