Security Incident Response, Senior Analyst (Americas)

About the role

We’re looking for a curious and detail-oriented Incident Response, Senior Analyst to harness your expertise in data analytics, infrastructure, application security, and identity management. You'll analyze security alerts and respond to a wide range of incidents, including workforce security, where your efforts will be crucial in preserving the trust our merchants place in Shopify. As the incident commander, you'll own issues from start to finish, persistently bringing all the pieces together and leaving no stone unturned. This role has a significant investigative component, offering daily opportunities to apply your analytical skills and experience navigating vast amounts of data to find that needle in the haystack that will be the key to resolving the security issue, working in close partnership with our Legal team.

Responsibilities

• Analyze and respond to security alerts, focusing on workforce security to reduce risks.
• Serve as an Incident Commander, leading response efforts and collaborating across Shopify.
• Partner daily with Legal on sensitive investigations, evidence gathering, and mitigation strategies.
• Implement new alerts to enhance detection capabilities.
• Collaborate with security, engineering, HR, and Legal teams to remediate findings and address risks.
• Lead root cause analysis sessions to prevent recurrence of incidents.
• Participate in defining security table-top exercises focused on workforce security.
• Refine and build knowledge base documentation for clarity among technical and legal stakeholders.
• Identify trends in the security landscape and recommend improvements.

Requirements

• Understanding of information security fundamentals, including threat models and detection techniques.
• Knowledge of security issues affecting web applications, infrastructure, and internal systems.
• Comfort with running and debugging scripts (e.g., Python, Ruby, bash) to automate work.
• Experience with logging and data analysis tools (e.g., SIEM, SOAR, SQL, Splunk, KQL).
• Familiarity with UEBA tools and IAM systems (e.g., Okta, Microsoft Entra).
• Knowledge of cloud environments and security logs (e.g., GCP, AWS, Azure).
• Excellent communication skills for distilling technical data into actionable intelligence.
• Experience in troubleshooting complex problems with minimal information.
• Proficiency in researching and using data analysis to identify security threats.

Nice to Have

• Experience in digital forensics or workforce security investigations is a strong asset.
• Proficiency in generating code/scripts for automation.
• Experience handling sensitive investigations such as employment or legal matters.
• Eastern timezone preferred.
• Comfort using AI/LLM tools for efficient task completion.
• Awareness of GitHub and continuous integration practices.

About Shopify

Opportunity is not evenly distributed. Shopify puts independence within reach for anyone with a dream to start a business. We propel entrepreneurs and enterprises to scale the heights of their potential. Since 2006, we’ve grown to over 8,300 employees and generated over $1 trillion in sales for millions of merchants in 175 countries. This is life-defining work that directly impacts people’s lives as much as it transforms your own. This is putting the power of the few in the hands of the many, is a future with more voices rather than fewer, and is creating more choices instead of an elite option.

About You

Moving at our pace brings a lot of change, complexity, and ambiguity—and a little bit of chaos. Shopifolk thrive on that and are comfortable being uncomfortable. That means Shopify is not the right place for everyone. Before you apply, consider if you can:

• Care deeply about what you do and about making commerce better for everyone.
• Excel by seeking professional and personal hypergrowth.
• Keep up with an unrelenting pace (the week, not the quarter).
• Be resilient and resourceful in face of ambiguity and thrive on (rather than endure) change.
• Bring critical thought and opinion.
• Put AI agents and tools to work on the tasks they're built for, and focus on the work only humans can do.
• Embrace differences and disagreement to get shit done and move forward.
• Work digital-first for your daily work.

We may use AI-enabled tools to screen, select, and assess applications. All AI outputs are reviewed and validated by our recruitment team.