Elastic
Senior Incident Response Analyst - InfoSec
$133K–$253K
United States · Senior · Full-time · Posted Oct 19, 2026
- Experience
- At least 3 years related to security operations / incident response.
- Visa sponsorship
- An export license may be required as a condition of employment for individuals located in or nationals of listed sanctioned countries or regions.
About the job
Respond to security alerts and lead investigations and coordinated remediation across Elastic’s global cloud, SaaS, CI/CD, and endpoint environments.
What you'll do
- Review alerts, investigate logs, identify root causes, and coordinate incident response and remediation across teams.
- Improve detection quality and response processes, including identifying enrichment and automation opportunities.
- Develop and document methods to detect, respond to, and eradicate advanced threats.
What they ask for
- At least 3 years of experience related to security operations or incident response in a complex, global environment.
- Demonstrated ability to solve complex IT and security problems through log and system analysis.
- Experience coordinating timely responses to IT and security problems.
- Eligible to work in DoD Impact Level 5 or above cloud service environments.
Nice to have
- SaaS and cloud experience.
- Experience or interest in optimizing processes via AI/ML; Elastic Stack experience is also a plus.
Pay
$133,100 — $210,600 USD base salary; $159,900 — $252,900 USD base salary
Tools
Elastic Detection Engine, Elastic Stack, SIEM
AI focus
AI/ML is mentioned as a possible way to optimize processes; it is a plus, not a stated core responsibility.
Model-written summary · the original posting is authoritative