> Markdown version of [/jobs/ext/4483629-incident-response-analyst-ii](https://www.wearedevelopers.com/jobs/ext/4483629-incident-response-analyst-ii). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Incident Response Analyst II

- **Company:** Western Governors University
- **Location:** Salt Lake City, UT, United States
- **Experience:** Experienced
- **Salary:** $108,200.0 - $162,400.0
- **Contract:** Permanent contract
- **Skills:** Amazon Web Services, Antivirus Softwares, Software System Penetration Testing, Bash Shell, Cloud Computing, Cloud Computing Security, Cyber Security, Computer Networks, Computer Forensics, Continuous Integration, Digital Forensics, Intrusion Detection and Prevention, Intrusion Detection Systems, Python (Programming Language), Network Forensics, Anti-Phishing, Security Information and Event Management, Syslog, Scripting, Mitre Att&ck, Firewalls (Computer Science), Information Technology, Security Orchestration, Automation & Response
- **Published:** October 5, 2026
- **Apply:** https://diversityjobs.com/career/18544755/Incident-Response-Analyst-Ii-Utah-Salt-Lake-City

## About the Role

* Bachelor's Degree in IT Security, Computer Science, Engineering, or related field.
 * 3 years of Information Security experience.
 * Experience analyzing SIEM, network, event, security, and IDS alert logs.
 * Experience working with MITRE ATT&CK Framework.
 * Experience with security industry standards and best practices, specifically with interpreting and implementing those standards in a corporate environment.
 * Scripting language experience (Bash, Python, etc.) with strong working knowledge of automation.
 * Experience working with compliance and regulatory program requirements.
 * Experience designing and deploying security solutions.
 * Knowledge and experience in incident handling, computer forensics, intrusion detection systems, firewalls, antivirus, syslog, and related security technologies.
 * Strong understanding of SIEM content security rules to detect malicious, suspicious, and/or abnormal events.
 * Working knowledge of intrusion detection methodologies, network traffic analysis, sensor tuning, and interpreting signatures.
 * Understanding of AWS services, cloud security principles, CI/CD security, infrastructure-as-code, and data encryption strategies.
 * Excellent analytical, problem-solving, decision-making, written, and verbal communication skills.

Equivalent relevant experience performing the essential functions of this job may substitute for education degree requirements. Generally, equivalent relevant experience is defined as 1 year of experience for 1 year of education and is the discretion of the hiring manager.
Bonus Points

 * 8 years of Information Security experience.
 * Experience recommending additional security requirements and safeguards.
 * Experience in the development of end-user operating manuals and documentation.
 * Familiarity with Cloud infrastructure.
 * Relevant security certifications (CISSP, GIAC, ISACA, CCSP, CCSK, AWS, etc.).

## Description

The current information security landscape is technically complex and constantly changing. The IT Security Analyst II uses their knowledge of current security methods and standards to gather operational information and assess and analyze tools, systems, and processes in defense of applications, systems, and networks and collaborate with Infrastructure and business teams.

This role has a strong incident response and security operations focus, with opportunities to apply expertise across digital forensics, intrusion detection, continuous monitoring, cloud security, and security automation. You'll collaborate with infrastructure teams, architects, risk professionals, and other security specialists to strengthen defensive capabilities and continuously improve how security threats are detected and addressed.
What You'll Do

 * Serve as a lead analyst for incident response and related security efforts, including digital forensics, continuous monitoring, intrusion detection and prevention, penetration testing, integration, and automation.
 * Investigate security events and unusual activity using SIEM, IDS/IPS, endpoint security, DLP, HIPS, EPP, client proxy, firewalls, and other security technologies.
 * Analyze phishing emails, logs, network traffic, alerts, and other security telemetry using industry-standard tools to identify malicious, suspicious, or anomalous behavior.
 * Lead or participate in tactical response efforts to investigate and address identified security risks across technical environments.
 * Develop and refine SIEM security rules and security use cases aligned with the MITRE ATT&CK Framework.
 * Collaborate with architects, risk professionals, infrastructure teams, and security specialists to build and integrate detective, preventive, and corrective security controls.
 * Improve incident response and security operations through documentation, automation, lessons learned, Correction of Errors (CoE), and the development of more effective security practices.