Incident Response Analyst II

About the role

Scope Entry-level monitoring; triages basic alerts; supports investigations.

Conducts initial incident investigations, escalates confirmed threats, and updates run books.

Leads incident handling, coordinates cross-functional responses, and performs forensic analysis.

Oversees incident response strategy, threat hunting, red/blue teaming initiatives, and executive-level reporting.

Essential Duties and Responsibilities

• Minimum of 3-5 years' experience in a command center, service center, or similar 24x7 operations center environment.
• Critical Power: Experience responding to failures in Uninterruptible Power Supplies (UPS), emergency generators, and Power Distribution Units (PDUs).
• Cooling & HVAC: Proven track record handling cooling loops, chillers, and Computer Room Air Conditioning (CRAC) units during thermal emergencies.
• Monitoring Tools: Hands-on experience triaging real-time alerts from Building Management Systems (BMS) and Data Center Infrastructure Management (DCIM) tools.
• Standard Operating Procedures: Following and executing Emergency Operating Procedures (EOPs) and Method of Procedure (MOP) documents.
• Vendor Management: Experience coordinating with external utility companies, fuel delivery vendors, and specialized equipment technicians under tight SLAs.

Education and/or Work Experience Requirements

• Experience in managing Data center enterprise incidents. (facility, noc, soc etc.)
• Associate’s degree in IT, or equivalent experience. 0–2 years in IT or Security Ops.
• Bachelor’s degree in Information Systems, or Computer Science. 2–4 years SOC/IR experience.
• 3–5 years of experience in incident response in data center environment.

Knowledge, Skills & Abilities

• Hands-on experience with Incident io, Grafana, Ring, JIRA, Teleport, Confluence.
• Familiarity with log sources (Windows, Linux, firewalls, cloud logs).
• Strong analytical, troubleshooting, and decision-making skills under pressure.
• Familiarity with regulatory standards (e.g., SOC 2, HIPAA, ISO 27001, NIST).
• Excellent written and verbal communication, including technical documentation.

Competencies

• Active learner, methodical, eager to follow procedures, dependable.
• Analytical, responsive, detail-oriented, collaborative, capable of leading investigations.
• Strategic, able to lead IR efforts, skilled at executive communication, mentor to junior analysts.
• Visionary, able to design incident response strategy, align security with business risk, lead multi-stakeholder efforts.

Physical Requirements

• Prolonged periods sitting at a desk and working on a computer.
• Ability to use a keyboard, mouse, and other standard office equipment.

Pay

$70,000 to 72,000 USD Annually

Benefits

• Medical provided through UHC (PPO, HSA, Surest options) / Medical provided through Kaiser (HMO option only) for California employees only
• Dental provided through UHC
• Nationwide Vision provided by UHC
• Flexible Spending Account for Health & Dependent Care
• Pre-Tax Account for Commuter Benefit/Parking & Transit (location-specific)
• Continuing Education and Professional Development via various integrated platforms, e.g. Udemy and Coursera
• Corporate Wellness Program provided by Goomi Group
• Employee Assistance Program
• Wellness Days
• Tuition Reimbursement (available 6 months after start date, capped)
• Paid Time Off (accrued and prorated, maximum of 120 hours annually)
• Paid Holidays
• Any other statutory leaves, paid time, or other ancillary benefits required under state and federal law