Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 21 hours ago

Incident Response Analyst

Workable (global search)107,284 open roles

Where
United States
Work mode
Remote
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowIncident Response AnalystWorkable (global search) · United States

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on Workable (global search)'s own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

9.5% of postings close within 7 days. Measured by our own scanner across the market. Workable (global search) postings stay open a median of 5 days.

Share of postings closed within
  1. 1.8%1 day
  2. 4.0%3 days
  3. 9.5%7 days
  4. 15.6%14 days
  5. 33.9%30 days
This job: posted 21 hours ago

Workable (global search) median: 5 days open

The posting

About Us

Thrive delivers upon the promise of technology by enabling our clients’ digital transformation journeys with best practices on an AI, cybersecurity and cloud focused NextGen managed services platform.

Thrive’s culture is powered by diverse talent, big ideas, and a customer-first mindset—and it’s what truly sets us apart. Thrive is built for people who want more than a weekday routine. If you’re hungry to grow, eager to tackle new challenges and ready to drive real impact in a rapidly expanding environment, then welcome to THRIVE!

Position Overview

With a growing client base, Thrive is continuing to build out its security team. We are looking to hire an Incident Response Analyst to take a role within our Security Operation Center. The analyst will assist with continuously monitoring and improving our customers' security posture, while preventing, detecting, analyzing, and responding to cybersecurity incidents utilizing technology and well-defined processes and procedures. The ideal candidate will have a passion for information security and will value what a properly managed Security monitoring solution can bring to our client needs.

Requirements

  • Process investigation requests from SOC Analysts who perform security event monitoring using Security Information and Event Management (SIEM) from multiple sources, including but not limited to, events from network and host-based intrusion detection/prevention systems, network infrastructure logs, systems logs, applications, and databases
  • Investigate intrusion attempts, differentiate false positives from true intrusion attempts, and perform in-depth analysis of exploits
  • Lead incident response and threat hunting efforts for confirmed High Priority security incidents and follow through until resolution
  • Utilize threat intelligence to identify and investigate potential security threats
  • Develop playbooks for incident response and incident management processes, including threat triage, incident investigation, and incident resolution
  • Conduct regular reviews of playbooks to ensure they are current and effective
  • Work with cross-functional teams to ensure that playbooks are aligned with the overall security strategy and goals
  • Participate in tabletop exercises and drills to test and validate playbooks
  • Monitor and evaluate security incidents to identify opportunities for improving playbooks
  • Keep up-to-date with current security threats and trends to ensure that playbooks are relevant and effective
  • Actively investigate the latest security vulnerabilities, advisories, incidents, and TTPs (tactics, techniques, and procedures) and work with the Security Engineering team to recommend use cases
  • Proactive monitoring, threat hunting, and response of known and/or emerging threats
  • Carry out Thrive’s information security strategy both internally and externally for 400+ clients
  • Analyze data from our SOC, SIEM and EDR platforms and determine if further analysis is needed
  • Work within Thrive’s security standards and best practices and recommend future enhancements
  • Stay abreast of security events and techniques to keep our clients protected

Qualifications

  • Demonstrates comprehension of best security practices
  • Has advanced knowledge of the following systems and technologies:
  • SIEM (Security Information and Event Management)
  • TCP/IP, computer networking, routing, and switching
  • IDS/IPS, penetration and vulnerability testing
  • Firewall and intrusion detection/prevention protocols
  • Windows, UNIX, and Linux operating systems
  • Network protocols and packet analysis tools
  • EDR, Anti-virus, and anti-malware
  • Content filtering
  • Email and web gateway
  • Malware, Network, or System Analysis
  • Professional experience in a system administration role supporting multiple platforms and applications
  • Ability to collaborate and communicate security issues to clients, peers and management.
  • Strong analytical and problem-solving skills
  • Adaptability and resilience in rapidly evolving situations
  • Ability to be a part of an on-call rotation, occasionally working nights and weekends to support High Priority Security Incidents

Required Skills

  • Technical proficiency in networking, operating systems, and security technologies
  • Familiarity with security tools like SIEM, IDS/IPS, EDR, and forensic analysis tools
  • Understanding of incident response procedures and methodologies
  • Understanding of frameworks such as MITRE ATT&CK and the Cyber Kill chain,
  • Familiarity with TCP/IP network protocols, application layer protocols (e.g., HTTP, SMTP, DNS, etc.)
  • Experience in responding to and investigating cloud, system or network intrusions
  • Excellent Written and Verbal Communication Skills
  • Expertise in forensics, malware analysis, and network intrusion response

Preferred Skills

  • Knowledge of common Windows and Linux/Unix system calls and APIs
  • Knowledge of programming languages
  • Knowledge of internal file structures for file formats commonly associated with malware (e.g. OLE, RTF, PDF, EXE, etc.)
  • Knowledge or experience in Detection Engineering
From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against Workable (global search)'s own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on Workable (global search)'s form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    Workable (global search)'s answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.