> Markdown version of [/jobs/ext/2736624-incident-response-analyst](https://www.wearedevelopers.com/jobs/ext/2736624-incident-response-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Incident Response Analyst

- **Company:** Hogan Inc
- **Location:** Denver, CO, United States
- **Experience:** Expert
- **Salary:** $135,000.0 - $175,000.0
- **Contract:** Permanent contract
- **Skills:** Artificial Intelligence, Software as a Service, Cyber Security, Query Languages, Digital Forensics, Python (Programming Language), Log Analysis, Windows PowerShell, Kusto Query Language, Security Information and Event Management, Scripting, Information Technology, Cybercrime, ArcSight Event Correlation, Security Orchestration, Automation & Response
- **Published:** September 5, 2026
- **Apply:** https://www.builtincolorado.com/job/senior-incident-response-analyst/11019090?handler=ApplyRedirect

## About the Role

* Six (6)+ years of experience in incident response, digital forensics, security operations, or a related cybersecurity discipline.
 * Experience investigating threats across enterprise endpoint, cloud, identity, network, email, and SaaS environments.
 * Strong expertise in SIEM technologies, log analysis, event correlation, threat hunting, and incident investigation.
 * Experience with EDR/XDR platforms and host-based investigation techniques across enterprise environments.
 * Demonstrated ability to improve detections, streamline response processes, and drive operational improvements.
 * Experience with security automation, SOAR platforms, PowerShell, Python, KQL, or similar scripting and query languages is preferred.
 * Strong communication, analytical, and problem-solving skills, with the ability to perform effectively during complex investigations and active incidents.
 * Bachelor's degree in information technology, computer science, cybersecurity, or equivalent experience.
 * Industry certifications such as GCIH, GCIA, GCFA, GCFE, GNFA, or CISSP preferred.

## Description

Hogan Lovells Cadwalader is looking for an experienced cybersecurity professional to join our Security Operations team and play a key role in protecting the firm's global technology environment. This position is responsible for leading security investigations, coordinating incident response activities, advancing detection capabilities, and helping strengthen the processes, technologies, and automation that support a mature and evolving security program. The successful candidate will combine strong technical expertise with sound judgment, partnering across security, technology, legal, privacy, risk, and business teams to identify, contain, and mitigate threats while continuously improving the firm's defensive capabilities., * Lead incident response activities through triage, investigation, containment, remediation, recovery, and post-incident analysis.

 * Investigate security events across endpoint, identity, network, cloud, email, and SaaS environments.
 * Conduct threat hunting and forensic investigations to identify malicious, suspicious, or unauthorized activity.
 * Develop and enhance detection logic, alerting, playbooks, workflows, and automation to improve operational effectiveness and response capabilities.
 * Serve as a senior escalation point for complex and high-priority security incidents.
 * Assess emerging threats, including risks associated with AI-enabled technologies, and support the continuous evolution of security operations.
 * Prepare clear and actionable investigation reports and communicate findings to both technical and non-technical stakeholders.
 * Mentor team members and contribute to the ongoing growth and maturity of the incident response and security operations program.


## Related Videos

- [Fighting the Next Wave of Cybercrime](https://www.wearedevelopers.com/videos/100331-fighting-the-next-wave-of-cybercrime)
- [Cyber Sleuth: Finding Hidden Connections in Cyber Data](https://www.wearedevelopers.com/videos/893-cyber-sleuth-finding-hidden-connections-in-cyber-data)
- [Progressive Delivery in Kubernetes](https://www.wearedevelopers.com/videos/949-progressive-delivery-in-kubernetes)
- [JavaScript? No. Java Scripts! - Scripting with Java](https://www.wearedevelopers.com/videos/2094-javascript-no-java-scripts-scripting-with-java)
- [Deep Fakes: The Lies We Can’t See](https://www.wearedevelopers.com/videos/1187-deep-fakes-the-lies-we-can-t-see)
- [Intermediate Bitcoin Script](https://www.wearedevelopers.com/videos/25-intermediate-bitcoin-script)

## Related Articles

- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [Data Analyst Salary in the UK](https://www.wearedevelopers.com/magazine/278-data-analyst-salary-in-the-uk)
- [Dev Digest 121 - AI goes offline](https://www.wearedevelopers.com/magazine/456-dev-digest-121-ai-goes-offline)
- [The Most Popular IT Jobs on the Market](https://www.wearedevelopers.com/magazine/376-the-most-popular-it-jobs-on-the-market)
- [Dev Digest 120 - Apple and peers](https://www.wearedevelopers.com/magazine/455-dev-digest-120-apple-and-peers)