Senior Incident Response Analyst

Description:

SAP NS2 is seeking an experienced Senior Incident Response Analyst (Tier 2) to support day-to-day security operations and lead complex investigations across endpoint, network, identity, and cloud environments. This role is focused on hands-on incident investigation and response, acting as a key escalation point from Tier 1 and a bridge to Tier 3. The ideal candidate has strong experience in triaging alerts, conducting deep investigations, and driving incidents through full lifecycle response.

Key Responsibilities
 

• Lead investigations and responses for security incidents across EDR, SIEM, cloud, and identity platforms.
• Perform advanced triage of escalated alerts to determine scope, impact, and severity.
• Execute containment, eradication, and recovery actions for confirmed incidents.
• Analyze endpoint, log, and cloud telemetry to identify malicious activity and attacker behavior.
• Investigate threats such as account compromise, malware execution, and unauthorized access.
• Support monitoring and response for cloud and identity-based threats.
• Serve as an escalation point for Tier 1 analyst investigations and escalations, providing feedback, mentoring, and guidance to improve analysis quality, documentation, and incident handling.
• Document findings, timelines, and outcomes within case management systems.
• Contributes to the improvement of incident response processes and detection capabilities.
   

General Qualifications
 

• 4–7+ years of experience in Security Operations / Incident Response
• Strong experience with:
  • Alert triage and investigation workflows
  • Endpoint and log-based investigations
  • EDR, SIEM, and cloud security platforms in a SOC or incident response environment