Senior Incident Detection/Response Analyst

Gunnison

. Serve as the senior technical lead for computer and network incident detection, investigation, forensics, and response .

Posted 10/27/2026full-timeUnited StatesSenior💰 $140,000 - $160,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive expertise in cybersecurity incident detection, investigation, and response, with a strong focus on forensic analysis and technical leadership. Proficient in developing detection logic and response playbooks while maintaining compliance in highly regulated environments.

Highest-signal resume keywords

Cybersecurity Incident ResponseSIEM Query LanguagesNetwork ForensicsTechnical LeadershipCertified Information Systems Security Professional (CISSP)

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Incident DetectionForensic AnalysisData RecoveryVulnerability ResearchEvidence PreservationInvestigation ProceduresDetection Logic DevelopmentSecurity AutomationMITRE ATT&CK FrameworkCloud Logging

Soft Skills

Client InteractionNegotiationMentoringCommunicationTeam Coordination

Tools & Technologies

SIEM PlatformsEndpoint Detection and ResponseNetwork Security ToolsIdentity TelemetrySecurity-Log Platforms

Certifications & Qualifications

Certified Information Systems Security Professional (CISSP)GIAC Certified Incident Handler (GCIH)GIAC Certified Forensic Analyst (GCFA)GIAC Network Forensic Analyst (GNFA)

Industry Keywords

CybersecurityIncident ManagementFederal AgenciesRegulated EnvironmentsTechnical Reports

Tech Stack

Tools & technologies

CloudCyber Security

About the role

Key responsibilities & impact

Serve as the senior technical lead for computer and network incident detection, investigation, forensics, and response
Lead detection, triage, analysis, and investigation of complex cybersecurity alerts, events, and incidents
Identify, deter, monitor, and investigate computer and network intrusions
Perform computer and network forensic analysis, evidence seizure support, evidence preservation, and data recovery
Research and maintain proficiency in tools, techniques, countermeasures, and trends involving vulnerabilities, data hiding, and encryption
Determine incident scope, affected assets, indicators, attack paths, techniques, business impact, and recommended response actions
Develop and execute investigative queries across SIEM, endpoint, network, cloud, identity, application, and security-log platforms
Conduct incident response in accordance with Department breach-response processes
Coordinate containment, eradication, recovery, and validation with system owners, engineers, SOC personnel, and incident-management stakeholders
Maintain complete investigation records, timelines, evidence, findings, and technical reports
Provide technical leadership, review analyst work, mentor personnel, and present findings to client and senior management stakeholders

Requirements

What you’ll need

U.S. citizenship is required
More than 10 years of experience in the subject area
Bachelor's degree
Senior industry professional certification such as Certified Information Systems Security Professional (CISSP) or equivalent
Demonstrated domain expertise and technical or management leadership on major tasks or technology assignments
Experience establishing goals and plans that meet project objectives and directing activities to ensure technical requirements are met
Experience interacting with clients, conducting negotiations, and interfacing with senior management
Advanced experience with SIEM query languages, endpoint detection and response, network forensics, cloud logging, identity telemetry, and MITRE ATT&CK
Experience supporting federal agencies or other highly regulated environments
Experience developing detection logic, investigation procedures, response playbooks, or security automation
Advanced certifications such as GCIH, GCFA, GNFA, or equivalent are preferred
Ability to obtain and maintain a High Risk Public Trust suitability determination
Must be eligible for employment in the United States
Gunnison is unable to sponsor candidates at this time

Benefits

Comp & perks

3 weeks of Personal Leave your first year
11 paid Holidays each year
5 days of Flexible Time Off each year for approved training or certifications (self-study is ineligible)
401(k) company match at 50% up to 10% of your salary
Medical, Dental and Vision Insurance
Life and Disability Insurance
Public Transportation Subsidies
Certifications and Training Allowance - Up to $5,000/year
Bonus and profit-sharing opportunities, depending on company and employee performance