Senior Incident Response Analyst

Job not on LinkedIn

🔥 0 minutes ago

🇺🇸 United States – Remote

⏰ Full Time

🟠 Senior

🚨 Incident Response Analyst

👻 Ghost score 10%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

OpenLoop

WebsiteLinkedInAll Job Openings

201 - 500 employees

Founded 2020

💼 Consulting

⚖️ Legal

📦 Logistics

💰 $15M Series A - OpenLoop Health on 2023-03

Consulting • Legal • Logistics

OpenLoop is a white-label telehealth platform and managed services provider that helps organizations launch and scale virtual care programs. It combines SaaS-based, brandable technology (scheduling, booking, payments, EHR/API integrations) with clinical staffing, credentialing, payer coverage and RCM, regulatory/legal support, and 24/7 patient support. OpenLoop serves health plans, hospitals and health systems, retailers, employers and digital health companies with AI-powered operations, a nationwide clinician network and broad insurance coverage including Medicare and Medicaid.

📋 Description

• Own tier-1 and tier-2 incidents end to end, including detection validation, triage, scoping, containment, eradication, recovery, and post-incident review • Conduct host, memory, network, cloud, and identity forensic investigations independently • Investigate EDR and SIEM telemetry, write and refine queries, build correlation logic, and reconstruct incident timelines • Share the IR on-call rotation and exercise named containment authority within a defined threshold • Author and rewrite IR playbooks based on personally handled incidents • Run post-incident reviews and track findings to closure • Automate or AI-assist repetitive triage and evidence-collection steps • Write defensible technical timelines and executive summaries • Achieve defined onboarding, incident ownership, forensic capability, playbook, review, MTTD, and MTTR objectives

🎯 Requirements

• 6–8 years of hands-on security experience, with the majority in incident response and/or digital forensics • Demonstrated ownership of the full incident lifecycle, from detection validation through post-incident review • Digital forensics breadth across host/disk, memory, network, cloud, and identity, based on real casework • Working depth in EDR/EPP, including endpoint telemetry investigation, response actions, and tool tuning • Working depth in SIEM, including query authoring, correlation logic, and timeline reconstruction from log data • Hands-on fluency with forensic tools such as Velociraptor, KAPE, Volatility, Autopsy, EnCase, FTK, X-Ways, plaso, Zeek, and Wireshark • Evidence handling discipline, including chain of custody, sound acquisition, and documentation suitable for legal, regulatory, and client scrutiny • MITRE ATT&CK fluency applied to real investigations • Scripting for investigation and automation using Python, PowerShell, or similar • Demonstrated hands-on use of AI tools such as Claude, ChatGPT, or Copilot in security work • Sound judgment regarding AI and sensitive data, including PHI, credentials, and telemetry • Ability to produce both a technical incident timeline and an executive summary • Willingness to participate in a shared IR on-call rotation • No specific degree is required

🏖️ Benefits

• Medical, Dental, and Vision plans • Flexible Spending/Health Savings Accounts • Flexible PTO • 401(k) + Company Match • Life Insurance • Pet insurance