Incident Response Analyst

Fortinet

. Investigate and respond to workspace security incidents across email, browser security and perimeter security domains .

Posted 9/20/2026full-timeTel Aviv • IsraelMid-LevelSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in incident response and security operations, with a strong focus on threat analysis, detection development, and communication of findings. Proficient in investigating security incidents and understanding attack vectors, while collaborating effectively with teams to enhance security measures.

Highest-signal resume keywords

Incident Response ExperiencePhishing AnalysisSQL Querying SkillsEmail Security KnowledgeScripting Languages Proficiency

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Incident ResponseThreat HuntingPhishing AnalysisSQLSPLKQLAQLStatic TechniquesDynamic TechniquesEmail Security Protocols

Soft Skills

Excellent CommunicationTeam PlayerProactive ApproachOwnership-Driven

Tools & Technologies

SMTPSPFDKIMDMARCPythonJavaScriptVisual Basic

Industry Keywords

Workspace SecuritySecurity IncidentsAttack VectorsMalwareEmail SpoofingBECATO

Tech Stack

Tools & technologies

JavaScriptPythonSMTPSQL

About the role

Key responsibilities & impact

Investigate and respond to workspace security incidents across email, browser security and perimeter security domains
Handle investigation requests submitted by customers
Perform targeted phishing analysis and investigate new attack campaigns
Conduct threat hunting based on attack patterns, behaviors, and indicators
Build and improve detections based on new attack types, tactics, companies and trends
Collaborate with development and research teams to provide incident-driven insights
Develop new detection engines for identifying previously unknown attacks
Write professional blog posts based on incident investigations and attack trends
Contribute to the company’s research-driven content and public visibility
Work in rotating shifts as part of a 24/7 operation, including nights, weekends, and holidays

Requirements

What you’ll need

At least 3 years of experience in an Incident Response or Security Operation roles
Strong understanding of attack vectors, including Phishing, BEC, Email spoofing and impersonation techniques, Malware, ATO and more
Knowledge of email protocols and security concepts: SMTP, SPF/DKIM/DMARC, headers, authentication methods
Strong querying skills using SQL, SPL, KQL or AQL
Good knowledge with Static & Dynamic techniques
Familiarity with and understanding of code and scripting languages such as Python, JavaScript, Visual Basic, or similar
Ability to read, interpret, and analyze potentially malicious scripts
Excellent written and verbal communication in English
Team player with a proactive, ownership-driven approach

Benefits

Comp & perks

Attractive Total Rewards package supporting overall health and financial well-being
Diversity and inclusivity
Welcoming work environment designed for a rewarding career journey