Expert Incident Response Cybersecurity Analyst Job at Hewlett Packard Enterprise (Galway)

Expert Security Analyst – Incident Coordinator

As an Expert Security Analyst – Incident Coordinator, you will take a leadership...

Location

Netherlands , Veldhoven

Salary:

Not provided

ASML

Expiration Date

Until further notice

Requirements

Bachelor’s or Master’s in Computer Science, Cybersecurity, or related field
7+ years experience in advanced cybersecurity roles
Experience working with stakeholders in a complex organization
Proven record of influencing upper management towards security best practices
Expertise in Security Monitoring, Log Analysis, and Threat Hunting
Deep knowledge of a wide range of domains such as Endpoint, Network, OT, Information and Cloud Security
Certifications – CISSP, GCIH, GCFA, CISM preferred
A Certificate of Good Conduct “Verklaring Omtrent het Gedrag (VOG)” is required
Possess a valid work permit for the Netherlands (preferred)
Legally authorized to access controlled technology as defined in the United States Export Administration Regulations

Job Responsibility

Security Monitoring – Actively monitor security alerts for malicious activity or anomalies, ensuring swift response
Incident Handling – Lead investigations into high-profile, complex, or advanced persistent threats (APTs)
Threat Hunting – Proactively search for hidden threats and improve detection capabilities
Incident Analysis – Correlate data across multiple sources to detect sophisticated attack patterns
Detection & Response Optimization – Develop advanced detection techniques and security automation strategies
Technology Leadership – Act as an SME for SecOps tools and threat domains
Mentorship & Training – Provide guidance and mentorship to analysts at all levels

Fulltime

Senior Cybersecurity Analyst, Threat Hunter

Our cybersecurity and information security teams at IDEXX contribute to a more r...

Location

United States , Westbrook, Maine

Salary:

120000.00 - 140000.00 USD / Year

IDEXX

Expiration Date

Until further notice

Requirements

6–10 years of experience in cybersecurity roles
Minimum of 3 years dedicated specifically to threat hunting or advanced incident response
Bachelor’s degree in computer science, Cybersecurity, Information Technology, or a related field
Preferred certifications GCIH (GIAC Certified Incident Handler) and CompTIA CySA+ (Cybersecurity Analyst+) certification
Proven, hands-on experience using platform for EDR (Endpoint Detection and Response) and threat hunting
Expert-level knowledge of PowerShell Scripting, Python and EDR and SIEM query language is preferred
Deep understanding of incident response lifecycles, methodologies, and forensic techniques
Strong knowledge of networking protocols, operating systems (Windows, Linux, macOS), and common attack vectors
Familiarity with scripting languages (e.g., Python, PowerShell) for automation of hunting tasks is a plus
Exceptional analytical and problem-solving skills with keen attention to detail

Job Responsibility

Proactively hunt for indicators of compromise (IOCs) and advanced persistent threats (APTs) across the network, endpoints, and cloud environments using threat intelligence and a hypothesis-driven methodology
Conduct in-depth analysis of security events, network traffic, and endpoint data to identify malicious activity and potential breaches
Utilize the SIEM and EDR platform extensively, applying expert knowledge of the scripting, SIEM and EDR query language to perform complex searches and data analysis
Lead and participate in incident response activities, including containment, eradication, and recovery efforts, serving as a primary escalation point for critical security incidents
Develop and refine threat hunting playbooks, procedures, and detection rules to improve the security team’s efficiency and effectiveness
Collaborate with the security engineering and security operations center (SOC) teams to integrate new threat intelligence and enhance existing security tools and controls
Mentor junior analysts and contribute to the ongoing improvement of the organization's overall security posture

What we offer

Opportunity for annual cash bonus
Health / Dental / Vision Benefits Day-One
5% matching 401k
Additional benefits including but not limited to financial support, pet insurance, mental health resources, volunteer paid days off, employee stock program, foundation donation matching

Fulltime

Third-Party Cybersecurity Incident Analyst

This role is categorized as hybrid. This means the successful candidate is expec...

Location

United States , Austin; Warren

Salary:

129400.00 - 212300.00 USD / Year

General Motors

Expiration Date

Until further notice

Requirements

Bachelor’s degree in Information Systems, Computer Science, Information Security, or related field
At least 7 years in information security with prior incident management, security operations, and cyber event analysis experience
Expert in cyber incident detection, investigation, and response, especially third-party and supply chain risk
knowledge of application, network, and OS security controls
understanding of vulnerability management and risk mitigation
Proven ability to lead complex cyber event activities, communicate technical findings to executives, and mentor team members
Strong investigative mindset
able to translate technical analysis into strategic business recommendations
highly detail-oriented and organized
Trusted with confidential and sensitive information at the enterprise level

Job Responsibility

Lead the triage, analysis, and escalation of critical third-party cybersecurity incidents, ensuring alignment with GM’s strategy
Assess incident impacts and urgency, guide containment actions, and provide expert advice to technical and non-technical stakeholders
Oversee investigations, incident tracking, and resolution, ensuring thorough documentation and reporting
Collaborate cross-functionally with Cyber Defense, GMIT, Legal, Purchasing, and leadership for effective response operations
Engage external partners to determine root causes and shape third-party risk management
Provide strategic support during high-priority and after-hours third-party incidents
Prepare and deliver executive-level reports and metrics to support informed decision-making
Mentor and guide others, fostering skill development across the team
Drive continuous improvement of incident response processes, tools, and methods
Coordinate communications with stakeholders and executive leadership, maintaining transparency and alignment during incidents

What we offer

medical
dental
vision
Health Savings Account
Flexible Spending Accounts
retirement savings plan
sickness and accident benefits
life insurance
paid vacation & holidays
tuition assistance programs

Fulltime

Security Operations Analyst

Location

Spain , Valencia

Salary:

Not provided

United ITs

Expiration Date

Until further notice

Requirements

Knowledge of Transmission Control Protocol / Internet Protocol (TCP/IP) protocols
Deep knowledge of Microsoft Security Tools (e.g. M365, Cloud App Security, Azure, Defender for Endpoints, Azure Security, Azure Sentinel and XDR)
Deep Knowledge of Cloud technologies (e.g. Azure, AWS and GCP)
Deep knowledge of SIEM tools like Splunk, QRadar, ArcSight, MS Sentinel, ELK Stack
Knowledge of at least one EDR solution (MS Defender for Endpoint, SentinelOne, CrowdStrike)
Knowledge of email security, network monitoring, and incident response
Knowledge of Linux/Mac/Windows
A minimum of five (5) years of relevant experience in information technology field, including triage of alerts and supporting security incidents
Proven experience with the usual toolbox available in a SOC (e.g., SIEMs, EDRs), able to autonomously perform technical analysis of security threats and collaborate with Incident Response team
Trouble ticket generation and processing experience

What we offer

Teleworking option: Yes, up to 4 days per week (for consultants working from Valencia)

Fulltime

Senior Incident Response Analyst

Wrike is seeking an experienced Senior Incident Response Analyst to help safegua...

Location

India , Bangalore

Salary:

Not provided

Klaxoon

Expiration Date

Until further notice

Requirements

Over 5 years of experience in a Senior Incident Response Analyst/SOC/Cybersecurity or similar security-focused role in a software product company
Deep understanding of network fundamentals and a wide range of security threats
Exceptional analytical and problem-solving skills, with the ability to think critically under pressure
Outstanding communication skills, both written and verbal, with the ability to convey complex concepts to technical and non-technical audiences
Hands-on experience with leading security information event management (SIEM) and extended detection and response (XDR) platforms (e.g., Rapid7, Splunk, Wazuh, Microsoft Defender for Endpoint, Crowdstrike)
Strong experience in log analysis, event correlation, and incident response

Job Responsibility

Lead the monitoring, analysis, and triage of complex security alerts and events, providing expert guidance to junior team members
Assess risk and impact of potential incidents, recommending and overseeing appropriate remediation actions
Employ a broad range of advanced security tools and technologies to proactively detect and investigate sophisticated cyber threats
Collaborate with and mentor other teams, including incident responders, to ensure timely and accurate escalation and resolution of high-priority cases
Oversee documentation and reporting of security incidents, ensuring accuracy, clarity, and timely delivery to relevant stakeholders
Drive the ongoing development and enhancement of security monitoring and detection capabilities, introducing best practices and automation where appropriate
Stay ahead of the latest security trends, emerging vulnerabilities, and best practices, sharing knowledge and recommendations within the team and across the organization
Demonstrated experience functioning at an L3 level, serving as the final escalation point for resolving complex security incidents and issues
Mentorship of junior/mid senior analysts, ability to share knowledge

What we offer

18 calendar days of paid vacation (12 days of National & Festival holidays (10 fixed, 2 flexible))
Sick Leave Compensation (5 Paid Uncertified Sick Days)
Menstrual Leave: Twelve (12) days per calendar year. Women employees are eligible for up to 1 day of menstrual leave per month.
Parental Leave: 26 Weeks Maternity / 4 Week Paternity
2 Volunteer Days
Group Medical Insurance (Employees + Dependents)
Term Life Insurance (Rs 50,00,000)
Personal Accident Insurance (Rs 50,00,000)
Monthly Broadband / Internet Reimbursement (INR 1500)
Hybrid Working Model + Complimentary Lunch & Snacks

Fulltime

Cybersecurity Expert (SOC & Cloud)

The Security team is excited to welcome a motivated Cybersecurity Expert to help...

Location

Spain , Barcelona

Salary:

Not provided

Leadtech Group

Expiration Date

Until further notice

Requirements

Bachelor/ Master's degree in Cybersecurity, Information Security, Computer Science, or a similar discipline
Knowledge of Security frameworks such as ISO 27001, NIST, PCI-DSS, OWASP, GDPR
Knowledge of technical concepts such as cloud computing, code review, application security, cryptography, forensics, vulnerability detection (Azure & AWS are a must)
Deep Knowledge of cybersecurity/technical concepts such as: GNU/Linux systems
Microsoft Sentinel and Defender, as well as experience with writing KQL queries
Microsoft Azure (Network Security Groups, Recovery Services Vaults, Playbooks and Workbooks)
TCP/IP, DNS, and firewalls
Python, Bash, and SQL, Java, PHP
Familiarity with attack and exploitation techniques involving operating systems, applications, and devices (CISSP, CompTIA, CEH)
Understanding of security best practices for data and systems protection

Job Responsibility

Operate & optimize (and potentially Lead) a Security Operations Center (SOC)
Advanced Incident Investigation and Analysis
Handling Complex Threats: Investigating high-priority alerts escalated from Tier 1/2, such as potential APTs (Advanced Persistent Threats) or ransomware
Deep-Dive Analysis: Performing forensics on compromised systems, analyzing malware, and reconstructing attack chains using packet captures and log data
Cross-Source Correlation: Stitching together fragmented data from SIEM, EDR (Endpoint Detection and Response), and NDR (Network Detection and Response) tools to build a comprehensive picture of the attack
Proactive Threat Hunting and Detection Engineering
Threat Hunting: Proactively searching network and endpoint data for undetected, hidden threats rather than waiting for alerts
Rule Creation & Tuning: Developing custom detection logic and SIEM correlation rules to identify new malicious behavior
Reducing False Positives: Refining alert systems to minimize noise, ensuring the team focuses on genuine security incidents
Incident Response and Containment

What we offer

Flexible career path with personalized internal training and an annual budget for external learning opportunities
Flexible schedule with flextime (7 - 9:30 a.m. start, 3:30 - 6 p.m. end)
Free Friday afternoons with a 7-hour workday
35-hour workweek in July and August
Competitive salary
Full-time permanent contract
Top-tier private health insurance (including dental and psychological services)
25 days of vacation plus your birthday off, with flexible vacation options—no blackout days
Office in Barcelona complete with free coffee, fresh fruit, snacks, a game room, and a rooftop terrace with stunning Mediterranean views
Ticket restaurant and nursery vouchers, paid directly from your gross salary

Fulltime

Incident Response Senior Analyst

We are seeking a highly skilled and detail-oriented Cybersecurity Incident Respo...

Location

United States , Salt Lake City

Salary:

Not provided

Alter Domus

Expiration Date

Until further notice

Requirements

Bachelor’s degree in computer science, information security, or related professional experience
Minimum of 1 to 3 years of experience in incident response, Security operation, threat management
Strong knowledge of SIEM, and SOAR environment
Hands-on experience with IDS/IPS, and endpoint protection platforms
Working knowledge of Azure Defender and AWS security suite (GuardDuty, Security Hub)
Knowledge of network device configurations and standards (Firewalls, Switches, NSGs)
Knowledge of common operating systems MacOS, Linux and Windows OS
Familiarity with malware analysis, reverse engineering, and forensic tools
Strong cross functional communication skills and the ability to work closely with internal teams & lead cyber incident remediation efforts
Familiarity with common security frameworks and standards, such as NIST

Job Responsibility

Respond to security incidents
Lead and manage alerts, investigate, contain, and eradicate the cyber threats
Conduct forensic investigations to identify the root cause of security breaches and recommend preventive measures
Participate in post-incident reviews to identify lessons learned
Coordinate with internal teams and external partners during incident containment, eradication, and recovery efforts
Monitor security information and event management (SIEM) systems, intrusion detection/prevention systems (IDS/IPS), and other tools for suspicious activity
Investigate and assess potential threats, vulnerabilities, and attack vectors
Create detailed incident reports, document findings, remediation steps, and lessons learned
Maintain and update incident response playbooks and processes
Participate in Tabletop exercise and incident response trainings for other stakeholders

What we offer

Support for professional accreditations
Flexible arrangements, generous holidays, plus an additional day off for your birthday
Continuous mentoring along your career progression
Active sports, events and social committees across our offices
24/7 support available from our Employee Assistance Program
The opportunity to invest in our growth and success through our Employee Share Plan
Plus additional local benefits depending on your location

Senior SOC Analyst

Brunswick is in search of a Senior Security Operations Center (SOC) Analyst to j...

Location

United States , Mettawa

Salary:

87800.00 - 128750.00 USD / Year

Herbruck Poultry Ranch

Expiration Date

Until further notice

Requirements

Bachelor’s degree in cybersecurity, computer science, engineering, or related field
Five plus years of experience in SOC monitoring, incident response, or related fields
Certifications in Information Security and related disciplines are a plus
Demonstrated technical understanding in emerging cybersecurity threats
Ability to create detections aligning with the MITRE ATT&CK framework
Expertise in SOAR, SIEM, threat intelligence, identity management, and endpoint detection and response tools
Strong understanding of threats, vulnerabilities, and incident response principles
Excellent judgment and ability to make quick decisions in complex situations
Perform tasks independently and work within a fast-paced environment
Exceptional written and verbal communication skills across varying levels of the organization

Job Responsibility

Serve as a subject matter expert for a team of analysts dedicated to monitoring and responding
Respond to and investigate cybersecurity incidents, including those that occur off-hours as part of a scheduled on-call rotation
Serve as a mentor and escalation point for junior SOC analysts, assisting with day-to-day SOC requirements
Identify strengths and areas for improvement within the team to improve skills and knowledgebase
Stay current with cybersecurity threats, AI developments, risks, and vulnerabilities that could impact services
Create detections aligned with the MITRE ATT&CK framework and recommend improvements to leadership
Refine and maintain playbooks, procedures, and guidelines that align with industry best practices
Maintain strong partnerships with security engineering, incident response, and IT teams to improve monitoring, workflow, and response capabilities
Document and share information with team members to help improve analytical skills
Support monitoring and response metrics, KPIs, and service level objectives for security events and incidents

What we offer

annual discretionary bonus
medical
dental
vision
paid vacation
401k (up to 4% match)
Health Savings Account (with company contribution)
well-being program
product purchase discounts

Fulltime

Expert Incident Response Cybersecurity Analyst

Hewlett Packard Enterprise

Location:
Ireland , Galway

Category:
IT - Software Development

Contract Type:
Not provided

Salary:

Job Description:

Job Responsibility:

Requirements:

Nice to have:

Additional Information:

Job Posted:
January 14, 2026

Looking for more opportunities? Search for other job offers that match your skills and interests.

Similar Jobs for Expert Incident Response Cybersecurity Analyst

Expert Security Analyst – Incident Coordinator

Senior Cybersecurity Analyst, Threat Hunter