Senior Incident Response Analyst

About GitHub
GitHub is the world’s leading platform for agentic software development — powered by Copilot to build, scale, and deliver secure software. Over 180 million developers, including more than 90% of the Fortune 100 companies, use GitHub to collaborate, and more than 77,000 organisations have adopted GitHub Copilot.
Locations
In this role you can work from Remote, United States
Overview

As a Senior Incident Response Analyst, you will design and implement solutions to address security incidents, enhance security policies, and identify opportunities for automation. The ideal candidate will be a key contributor to strengthening our incident response capabilities, driving impactful solutions through automation and policy enhancements while gaining hands-on experience with cutting-edge security strategies and collaborating with industry experts in a dynamic environment.

Responsibilities

Develop and Operationalize Solutions:

● Develop and implement solutions to address security incidents across network, identity, and application security, ensuring scalability and effectiveness.

● Utilize advanced data analysis and forensics techniques to investigate and resolve security incidents.

● Continuously improve incident response processes and solutions over time.

Automation:

● Identify and implement automation opportunities to enhance efficiency and effectiveness in incident response operations.

● Develop and maintain automation scripts and tools to streamline incident detection and response processes.

● Collaborate with others to prioritize and invest in the most valuable automation opportunities.

Security Policies and Standards:

● Contribute to the development and maintenance of comprehensive security policies, standards, and best practices.

● Design and implement mitigation strategies to address policy gaps and enhance the organization's security posture.

● Ensure compliance with relevant security regulations and standards, conducting risk assessments and audits to identify and address potential compliance gaps.

Collaboration:

● Engage with internal teams and external partners to promote security risk awareness and best practices.

● Translate complex technical information into understandable terms for nontechnical audiences, effectively communicating security risks.

● Develop and share reports with leaders on security risks and remediation strategies to resolve and mitigate security concerns.

● Collaborate with architecture teams to integrate security into the design and development of systems and applications, ensuring robust security frameworks are in place from the ground up.

Data-Driven Analysis and Forensics:

● Analyze key metrics and key performance indicators (KPIs) to identify trends in security incidents and escalate appropriately.

● Utilize multiple data sources to conduct and interpret analysis, identifying anomalies and patterns in security data.

● Leverage forensics techniques to investigate and resolve security incidents, ensuring thorough and accurate analysis.

● Recommend improvements and metrics to address gaps in measurement and enhance incident response capabilities.

Incident Response Activities:

● Participate in security incident response activities, leveraging technical acumen to address and resolve security concerns effectively.

● Recognize patterns and trends to propose innovative solutions for security improvements, contributing to a culture of continuous enhancement and excellence.

● Ensure compliance with relevant security regulations and standards, conducting risk assessments and audits to identify and address potential compliance gaps.

Qualifications

Required Qualifications:

● 7+ years experience in security analysis, security research, cyber security, security engineering, or relevant area

o OR Associate's Degree AND 6+ years experience in security analysis, security research, cyber security, security engineering, or relevant area

o OR Bachelor's Degree AND 5+ years experience in security analysis, security research, cyber security, security engineering, or relevant area

o OR Master's Degree AND 3+ years experience in security analysis, security research, cyber security, security engineering, or relevant area

o OR Doctorate AND 1+ year(s) experience in security analysis, security research, cyber security, security engineering, or relevant area

o OR equivalent experience.

Preferred Qualifications:

● 9+ years' experience in Security Operations, security research, cyber security, security engineering, or relevant area

● Certified Information Systems Security Professional (CISSP), Certified Information Systems Auditor (CISA), Certified Information Security Manager (CISM), Global Information Assurance Certification (GIAC), GIAC Certified Forensic Examiner (GCFE), GIAC Certified Forensic Analyst (GCFA), GIAC Certified Incident Handler (GCIH), GIAC Certified Penetration Tester (GPEN), Offensive Security Certified Professional (OSCP), Security+, or other relevant certification

● 1+ year(s) experience in software development

● 1+ year(s) experience working with GitHub and/or open-source software

● 1+ year(s) experience working with application security tools (SAST, DAST, SCA) and/or performing security review activities (threat modeling, security design and architecture review, application security testing and code review) within the development lifecycle

● Proficiency in using application security tools such as Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), and Software Composition Analysis (SCA)

● Experience working with GitHub and/or other open-source software platforms, which is beneficial for understanding the collaborative and open-source nature of the role

Compensation Range
The base salary range for this job is USD $124,000.00 - USD $329,200.00 /Yr.
These pay ranges are intended to cover roles based across the United States. An individual's base pay depends on various factors including geographical location and review of experience, knowledge, skills, abilities of the applicant. At GitHub certain roles are eligible for benefits and additional rewards, including annual bonus and stock. These rewards are allocated based on individual impact in role. In addition, certain roles also have the opportunity to earn sales incentives based on revenue or utilization, depending on the terms of the plan and the employee's role.
This position will be open for a minimum of 3 days, with applications accepted on an ongoing basis until the position is filled.

GitHub values

• Customer-obsessed
• Ship to learn
• Growth mindset
• Own the outcome
• Better together
• Diverse and inclusive

Manager fundamentals

• Model
• Coach
• Care

Leadership principles

• Create clarity
• Generate energy
• Deliver success

Who We Are
GitHub is the world’s leading AI-powered developer platform with 150 million developers and counting. We’re also home to the biggest open-source community on earth (and 99% of the world’s software has open-source code in its DNA). Many of the apps and programs you use every day are built on GitHub.
Our teams are dreamers, doers, and pioneers, leading the way in AI, driving humanitarian efforts around the globe, and even sending open source to Mars (and beyond!). At GitHub, our goal is to create the space you need to do your best work. We’re remote-first and offer competitive pay, generous learning and growth opportunities, and excellent benefits to support you, wherever you are—because we know that people flourish when they can work on their own terms.
Join us, and let’s change the world, together.
EEO Statement
GitHub is made up of people from a wide variety of backgrounds and lifestyles. We embrace diversity and invite applications from people of all walks of life. We don't discriminate against employees or applicants based on gender identity or expression, sexual orientation, race, religion, age, national origin, citizenship, disability, pregnancy status, veteran status, or any other differences. Also, if you have a disability, please let us know if there's any way we can make the interview process better for you; we're happy to accommodate!

Develop and Operationalize Solutions:

● Develop and implement solutions to address security incidents across network, identity, and application security, ensuring scalability and effectiveness.

● Utilize advanced data analysis and forensics techniques to investigate and resolve security incidents.

● Continuously improve incident response processes and solutions over time.

Automation:

● Identify and implement automation opportunities to enhance efficiency and effectiveness in incident response operations.

● Develop and maintain automation scripts and tools to streamline incident detection and response processes.

● Collaborate with others to prioritize and invest in the most valuable automation opportunities.

Security Policies and Standards:

● Contribute to the development and maintenance of comprehensive security policies, standards, and best practices.

● Design and implement mitigation strategies to address policy gaps and enhance the organization's security posture.

● Ensure compliance with relevant security regulations and standards, conducting risk assessments and audits to identify and address potential compliance gaps.

Collaboration:

● Engage with internal teams and external partners to promote security risk awareness and best practices.

● Translate complex technical information into understandable terms for nontechnical audiences, effectively communicating security risks.

● Develop and share reports with leaders on security risks and remediation strategies to resolve and mitigate security concerns.

● Collaborate with architecture teams to integrate security into the design and development of systems and applications, ensuring robust security frameworks are in place from the ground up.

Data-Driven Analysis and Forensics:

● Analyze key metrics and key performance indicators (KPIs) to identify trends in security incidents and escalate appropriately.

● Utilize multiple data sources to conduct and interpret analysis, identifying anomalies and patterns in security data.

● Leverage forensics techniques to investigate and resolve security incidents, ensuring thorough and accurate analysis.

● Recommend improvements and metrics to address gaps in measurement and enhance incident response capabilities.

Incident Response Activities:

● Participate in security incident response activities, leveraging technical acumen to address and resolve security concerns effectively.

● Recognize patterns and trends to propose innovative solutions for security improvements, contributing to a culture of continuous enhancement and excellence.

● Ensure compliance with relevant security regulations and standards, conducting risk assessments and audits to identify and address potential compliance gaps.

Required Qualifications:

● 7+ years experience in security analysis, security research, cyber security, security engineering, or relevant area

o OR Associate's Degree AND 6+ years experience in security analysis, security research, cyber security, security engineering, or relevant area

o OR Bachelor's Degree AND 5+ years experience in security analysis, security research, cyber security, security engineering, or relevant area

o OR Master's Degree AND 3+ years experience in security analysis, security research, cyber security, security engineering, or relevant area

o OR Doctorate AND 1+ year(s) experience in security analysis, security research, cyber security, security engineering, or relevant area

o OR equivalent experience.

Preferred Qualifications:

● 9+ years' experience in Security Operations, security research, cyber security, security engineering, or relevant area

● Certified Information Systems Security Professional (CISSP), Certified Information Systems Auditor (CISA), Certified Information Security Manager (CISM), Global Information Assurance Certification (GIAC), GIAC Certified Forensic Examiner (GCFE), GIAC Certified Forensic Analyst (GCFA), GIAC Certified Incident Handler (GCIH), GIAC Certified Penetration Tester (GPEN), Offensive Security Certified Professional (OSCP), Security+, or other relevant certification

● 1+ year(s) experience in software development

● 1+ year(s) experience working with GitHub and/or open-source software

● 1+ year(s) experience working with application security tools (SAST, DAST, SCA) and/or performing security review activities (threat modeling, security design and architecture review, application security testing and code review) within the development lifecycle

● Proficiency in using application security tools such as Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), and Software Composition Analysis (SCA)

● Experience working with GitHub and/or other open-source software platforms, which is beneficial for understanding the collaborative and open-source nature of the role