← All roles

Senior Incident Response Analyst - InfoSec

Elastic· InfoSec
Apply on company site
Remote$133.1k - $210.6kFull-timePosted 5d ago

About the role

Senior Incident Response Analyst at Elastic focused on reviewing and responding to alerts across diverse sources, guiding domain experts, identifying root causes, and coordinating multi-team remediation to strengthen security posture.

Responsibilities

  • Review and respond to alerts generated from our Elastic Detection Engine and other monitoring sources
  • Provide feedback to the Threat Detection team to improve detections (false positives, enrichment opportunities, automated response)
  • Conduct analysis on SIEM and/or endpoint logs during complex investigations
  • Develop and document innovative approaches to detect, respond to, and eradicate advanced threats and improve time to respond
  • Identify additional integration points for event enrichment and automated response
  • Gather additional context for security events
  • Identify root cause of events and collaborate with teams to remediate control gaps or failures
  • Oversee and coordinate response activities spanning multiple teams and products to ensure comprehensive remediation and mitigation of security gaps

Qualifications

  • At least 3 years of experience related to security operations / incident response in a complex, global environment. SaaS and cloud experience is a plus.
  • Demonstrated ability to solve complex IT and security problems through log and system analysis (Incident Response, SRE, System Administration). Experience with Elastic Stack is a plus.
  • Demonstrated ability to think innovatively about solving critical security problems; experience or interest in AI/ML optimization is a plus.
  • Experience coordinating response activities to resolve IT and security-related problems with appropriate stakeholders in a timely manner.
  • Strong communication skills and ability to make sound decisions with limited information; willingness to challenge the status quo.
  • Eligibility to work in DoD Impact Level 5 or above cloud service environments

Skills

Required:Incident response and investigationCommunication
Nice to have:Elastic StackThreat detection and enrichmentAutomated response

Benefits

  • Stock options participation through Elastic's stock program
  • Company-matched 401k with dollar-for-dollar matching up to 6% of eligible earnings
  • Holistic benefits emphasizing employee well-being
  • Competitive pay based on work performed, not prior salary
  • Health coverage for employee and family in many locations
  • Flexible locations and schedules for many roles
  • Generous vacation days
  • Donation matching up to $2000 (or local currency equivalent)
  • Up to 40 hours per year for volunteer projects
  • Parental leave minimum 16 weeks
Last updated Oct 22, 2026. Interested? Apply on the company site.
Elastic logo

About Elastic

The open source platform that powers search, observability, security, and more ...

Power insights and outcomes with The Elastic Search AI Platform. See into your data and find answers that matter with enterprise solutions designed to help you accelerate time to insight.

searchobservabilitysecurityAIenterprise solutionsvector database
Company profileWebsite

More open roles at Elastic