Incident Response Analyst, I

Centene Corporation

. Investigate security incidents and recommend security enhancements .

Posted 10/26/2026full-timeRemote • Missouri • United StatesJuniorMid-Level💰 $31 - $55 per hourWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in security incident investigation, threat analysis, and remediation efforts, with a strong foundation in networking fundamentals and operating systems. Proficient in utilizing EDR tools, SIEM platforms, and scripting for automation and response.

Highest-signal resume keywords

Security Incident InvestigationThreat Analysis and RemediationEDR Tools FamiliaritySIEM Platforms and Query LanguagesIndicators of Compromise (IOCs) Knowledge

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Networking FundamentalsLog AnalysisWindows Operating SystemLinux Operating SystemBasic Scripting with PowerShellBasic Scripting with PythonEmail Security Platforms FamiliarityIndicators of Compromise (IOCs)Threat Actor Tactics, Techniques, and Procedures (TTPs)MITRE ATT&CK Framework Familiarity

Tools & Technologies

CrowdStrikeMicrosoft Defender for EndpointSplunkKQLSQLProofpoint

Certifications & Qualifications

CompTIA Security+Microsoft SC-200AWS Certified Cloud PractitionerISC2 CC

Industry Keywords

Incident Response PlanSecurity Breaches PreventionAccess Control ValidationAutomated ScriptsThreat Reporting Services

Tech Stack

Tools & technologies

AWSCloudDNSFirewallsLinuxPythonSplunkSQLTCP/IP

About the role

Key responsibilities & impact

Investigate security incidents and recommend security enhancements
Identify common attack patterns targeting externally facing assets
Assist with execution of the enterprise Incident Response Plan
Support enterprise-wide remediation efforts coordinated by DFIR
Contribute to leadership briefings and reporting
Triage and investigate security alerts, events, and notifications across endpoint, email, identity, and network telemetry
Escalate confirmed or suspected incidents to DFIR according to defined criteria
Analyze phishing and malicious email to determine disposition
Document investigation steps, findings, and dispositions in the case management system
Execute approved containment actions, including IOC blocking and host isolation
Identify detection tuning and automation opportunities
Support reviews of security configurations on production information systems and networks
Assist with prevention and resolution of security breaches
Support access authorization reviews and access control validation
Contribute to automated scripts, response playbooks, and programmed responses
Collaborate with Information Security Architects, Engineers, and software or hardware stakeholders
Integrate third-party attack monitoring and threat reporting services into internal CIRT communications systems
Perform other duties as assigned and comply with policies and standards

Requirements

What you’ll need

Must be authorized to work in the U.S. without employment-based visa sponsorship now or in the future
Bachelor's degree in a quantitative or business field (e.g., statistics, mathematics, engineering, computer science) and 0–2 years of related experience, or equivalent experience, or completion of a Centene-sponsored emerging talent program
Networking fundamentals, including TCP/IP, DNS, HTTP, routers, switches, and firewalls
Windows and Linux operating system fundamentals
Log analysis and investigation of security events
Knowledge of indicators of compromise (IOCs) and threat actor tactics, techniques, and procedures (TTPs)
Preferred hands-on familiarity with EDR tools such as CrowdStrike or Microsoft Defender for Endpoint
Preferred hands-on familiarity with SIEM platforms and query languages such as Splunk SPL, KQL, or SQL
Familiarity with email security platforms such as Proofpoint and phishing analysis
Familiarity with the MITRE ATT&CK framework
Basic scripting with PowerShell or Python
CompTIA Security+, Microsoft SC-200, AWS Certified Cloud Practitioner, or ISC2 CC preferred but not required

Benefits

Comp & perks

Competitive pay
Health insurance
401K plan
Stock purchase plans
Tuition reimbursement
Paid time off plus holidays
Flexible approach to work with remote, hybrid, field or office work schedules
Additional forms of incentives may be included in total compensation
Equal opportunity employer committed to diversity