Staff CSIRT Analyst (Cybersecurity)

Location: Remote within the United States

Compensation: $200,000–$210,000 per year, plus bonus and equity

Company

A remote-first cybersecurity product company providing enterprise-grade protection through in-house technology and a 24/7 human-led Security Operations Center.

What you will do

• Lead identification, triage, validation, and escalation of internal security incidents across multiple telemetry sources.
• Own the end-to-end incident response lifecycle and coordinate response workstreams across functions.
• Design and execute incident readiness exercises, including tabletop sessions and purple teaming.
• Optimize EDR, MDR, SIEM, and other telemetry sources with engineering, product security, and detection engineering teams.
• Partner with Offensive Security to close visibility gaps and improve coverage against modern threat actor TTPs.
• Lead post-incident reviews, maintain playbooks and standards, and drive remediation, tooling, and process improvements.

Requirements

• Remote work from the United States.
• 8+ years of experience in incident response, SOC operations, or digital forensics.
• Advanced knowledge of EDR/MDR platforms, SIEM or ELK, and AWS, Azure, or M365 security environments.
• Experience leading small project teams and aligning technology stacks across functions.
• Ability to explain complex incident details to technical teams and executive stakeholders.
• Familiarity with SOAR and automation platforms, Confluence, Jira, and Lucidchart.

Culture & Benefits

• 100% remote work environment.
• Paid vacation, sick time, holidays, and 12 weeks of paid parental leave.
• Medical, dental, vision, life, and disability insurance plans.
• 401(k) contribution of 5% regardless of employee contribution.
• Stock options for all full-time employees.
• Home-office reimbursement, professional development assistance, digital reimbursement, and access to coaching.