Incident Response Analyst – Security Operations

🔥 51 minutes ago

🤠 Texas – Remote

🤠 Texas – Remote

💵 $102.3k - $135.9k / year

⏰ Full Time

🟡 Mid-level

🟠 Senior

🛡️ Security Operations

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Cisco

WebsiteLinkedInAll Job Openings

10,000+ employees

Founded 1984

🔧 Hardware

🔐 Security

🏢 Enterprise

Hardware • Security • Enterprise

Cisco is a multinational technology company that provides networking hardware, software, and services to enterprises, service providers, and governments. It builds routers, switches, optical transceivers, programmable silicon, and edge computing platforms, and offers security, collaboration (Webex), observability, and AI-enabled software and support services to help organizations design, operate, and secure large-scale networks and data centers. Cisco also delivers professional services, training, and cloud-managed solutions to support digital transformation and AI-ready infrastructure.

📋 Description

• Own the full arc of security incidents from first alert to documented resolution. • Triaging, investigating, and responding to security alerts across Splunk's enterprise and product environments. • Scoping threats, collecting evidence, and driving response actions using Splunk tooling and security platforms. • Partnering with Detection Engineering to tune detections, cut false positives, and close coverage gaps. • Building and maintaining SOC automation to eliminate repetitive work including scripts, playbooks, and enrichment workflows. • Applying AI-assisted and agentic tooling to accelerate investigation, enrichment, summarization, and repeatable analyst workflows with human oversight at every step. • Hunting threats, leading incident reviews, and contributing to cross-team investigations that raise SOC-wide quality.

🎯 Requirements

• Bachelor's Degree and 4+ years of experience in security operations, incident response, or related technical role • Working knowledge of incident response, alert triage, threat hunting, evidence handling, escalation workflows, and common attacker techniques • Hands-on experience triaging and investigating alerts using SIEM, EDR, cloud, or network security tooling • Experience with Git/GitLab workflows: branching, merge requests, code review, and CI/CD • Experience with automation scripts, and make updates to playbooks, pipeline configurations, or modular tooling • Experience with AI-assisted development, AI-powered security tooling, or agentic workflows, and ability to critically evaluate tool output before taking action • Experience with MITRE ATT&CK, threat hunting methodology, malware triage, phishing analysis, vulnerability exploitation, attacker infrastructure analysis, or SOC performance metrics. • Strong written and verbal communication skills, including the ability to document investigations, write clear runbooks, and explain technical findings • Experience with Splunk Enterprise Security, Splunk SPL, SOAR platforms, or large-scale security telemetry environments • Experience building, maintaining, or reviewing SOC automation, enrichment workflows, SOAR playbooks, detection-as-code, reusable modules, or agentic investigation workflows • Familiarity with cloud, container, Kubernetes, CI/CD runner, artifact registry, package management, or software supply chain security concepts • Scripting or automation experience in Python, Bash, Go, or JavaScript • Must be a U.S. Person (U.S. citizen) and maintain services in a FedRAMP-compliant environment.

🏖️ Benefits

• Medical, dental and vision insurance • 401(k) plan with matching contribution • Paid parental leave • Short and long-term disability coverage • Basic life insurance • 10 paid holidays per full calendar year, plus 1 floating holiday • 1 paid day off for employee’s birthday • Paid year-end holiday shutdown • 4 paid days off for personal wellness • 16 days of paid vacation time per full calendar year for non-exempt employees • Flexible vacation time off program for exempt employees • 80 hours of sick time off provided on hire date and each January 1st thereafter • Up to 80 hours of unused sick time carried forward • Optional 10 paid days per full calendar year to volunteer • Grants of Cisco restricted stock units for continued employment • Performance-based incentive pay for sales roles