Senior Incident Response Analyst

About GitHub GitHub is the world’s leading platform for agentic software development — powered by Copilot to build, scale, and deliver secure software. Over 180 million developers, including more than 90% of the Fortune 100 companies, use GitHub to collaborate, and more than 77,000 organisations have adopted GitHub Copilot. Locations In this role you can work from Remote, United States Overview As a Senior Incident Response Analyst, you will design and implement solutions to address security incidents, enhance security policies, and identify opportunities for automation. The ideal candidate will be a key contributor to strengthening our incident response capabilities, driving impactful solutions through automation and policy enhancements while gaining hands-on experience with cutting-edge security strategies and collaborating with industry experts in a dynamic environment.

Develop and Operationalize Solutions: ● Develop and implement solutions to address security incidents across network, identity, and application security, ensuring scalability and effectiveness. ● Utilize advanced data analysis and forensics techniques to investigate and resolve security incidents. ● Continuously improve incident response processes and solutions over time.   Automation: ● Identify and implement automation opportunities to enhance efficiency and effectiveness in incident response operations. ● Develop and maintain automation scripts and tools to streamline incident detection and response processes. ● Collaborate with others to prioritize and invest in the most valuable automation opportunities.   Security Policies and Standards: ● Contribute to the development and maintenance of comprehensive security policies, standards, and best practices. ● Design and implement mitigation strategies to address policy gaps and enhance the organization's security posture. ● Ensure compliance with relevant security regulations and standards, conducting risk assessments and audits to identify and address potential compliance gaps.   Collaboration: ● Engage with internal teams and external partners to promote security risk awareness and best practices. ● Translate complex technical information into understandable terms for nontechnical audiences, effectively communicating security risks. ● Develop and share reports with leaders on security risks and remediation strategies to resolve and mitigate security concerns. ● Collaborate with architecture teams to integrate security into the design and development of systems and applications, ensuring robust security frameworks are in place from the ground up.   Data-Driven Analysis and Forensics: ● Analyze key metrics and key performance indicators (KPIs) to identify trends in security incidents and escalate appropriately. ● Utilize multiple data sources to conduct and interpret analysis, identifying anomalies and patterns in security data. ● Leverage forensics techniques to investigate and resolve security incidents, ensuring thorough and accurate analysis. ● Recommend improvements and metrics to address gaps in measurement and enhance incident response capabilities.   Incident Response Activities: ● Participate in security incident response activities, leveraging technical acumen to address and resolve security concerns effectively. ● Recognize patterns and trends to propose innovative solutions for security improvements, contributing to a culture of continuous enhancement and excellence. ● Ensure compliance with relevant security regulations and standards, conducting risk assessments and audits to identify and address potential compliance gaps.

Required Qualifications: ● 7+ years experience in security analysis, security research, cyber security, security engineering, or relevant area o OR Associate's Degree AND 6+ years experience in security analysis, security research, cyber security, security engineering, or relevant area o OR