> Markdown version of [/jobs/ext/4588880-incident-response-analyst](https://www.wearedevelopers.com/jobs/ext/4588880-incident-response-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Incident Response Analyst - **Company:** ARM - **Location:** United States - **Contract:** Permanent contract - **Skills:** Microsoft Windows, Data Analysis, User Authentication, Microsoft Azure, Cloud Computing, Cyber Security, Computer Networks, Information Leak Prevention, Linux, Digital Forensics, Identity and Access Management, Python (Programming Language), Microsoft Security Essentials, Packet Analyzer, Windows PowerShell, Cloud Services, Kusto Query Language, Security Information and Event Management, Wireshark, Software Vulnerability Management, Forensic Toolkit, Scripting, Mitre Att&ck, Malware, Cyber Threat Analysis, Information Technology, CIS Benchmarks, Encase, Security Orchestration, Automation & Response - **Published:** November 5, 2026 - **Apply:** https://computerjobs.com/us/en/mob/job/236DEBE99895787159 ## About the Role * Practical experience in cyber incident response, security monitoring or a Security Operations Centre environment. * Hands-on experience investigating security alerts and incidents using SIEM and EDR/XDR technologies. * Experience analysing Windows and Linux host artefacts, authentication activity, security logs, network traffic and packet captures. * Working knowledge of incident response life cycle activities including preparation, detection, analysis, containment, eradication, recovery and lessons learned. * Experience producing incident records, investigation reports, management updates and post-incident findings. * Understanding of attacker behaviours and frameworks including MITRE ATT&CK, Cyber Kill Chain and NIST incident response guidance. * Knowledge of enterprise networking, identity and access management, cloud services, email security, endpoint security, vulnerability management and data loss prevention. * Ability to manage multiple priorities, exercise sound judgement under pressure and communicate clearly with technical and senior stakeholders. * Awareness of evidence handling, forensic integrity, confidentiality and regulatory considerations relevant to cyber investigations. Desirable * Experience in banking, financial services or another regulated environment. * Experience with threat intelligence, malware analysis, Scripting or automation using PowerShell, Python, KQL or similar languages. * Experience developing detection rules, response playbooks, threat hunts or security orchestration and automation workflows. * Knowledge of Microsoft security technologies such as Sentinel, Defender XDR, Defender for Identity and Defender for Cloud, or equivalent platforms. * Exposure to forensic tools such as EnCase, FTK, Velociraptor, Volatility, Wireshark or equivalent. * Understanding of cloud investigation techniques across Microsoft Azure, Microsoft 365 or other major cloud platforms., * Relevant professional experience supported by a degree in Cyber Security, Computer Science or a related discipline, or equivalent practical experience. * One or more relevant certifications such as GCIH, GCIA, GCFA, GNFA, SC-200, CySA+, CISSP or equivalent are desirable. * Sound knowledge of information security principles, recognised standards and regulatory expectations, including NIST, CIS Controls and relevant privacy requirements. ## Description We are seeking an experienced Incident Response Analyst to join a growing Cyber Security function. This role is responsible for detecting, triaging, investigating and coordinating the resolution of cyber security incidents across a complex enterprise environment. The successful candidate will play a key role in reducing business risk, improving cyber resilience and enhancing incident response capabilities through threat hunting, digital forensics and continuous security improvement., * Monitor, triage and investigate cyber security alerts and incidents across enterprise environments. * Lead and support incident response activities, including containment, eradication and recovery. * Conduct digital forensic investigations to determine scope, root cause and impact of security incidents. * Analyse endpoint, network, cloud and identity-based security events to identify threats and compromised assets. * Perform proactive threat hunting and develop detection rules to improve security monitoring capabilities. * Maintain accurate incident records, produce investigation reports and provide updates to technical and senior stakeholders. * Support post-incident reviews, root cause analysis and implementation of lessons learned. * Develop and maintain incident response playbooks, procedures and governance documentation. * Contribute to cyber exercises, simulations and continual improvement of the organisation's security posture. * Collaborate with technology, business, risk, compliance and third-party teams throughout the incident life cycle. ## About Arm Arm is the industry’s highest-performing and most power-efficient compute platform with unmatched scale that touches 100 percent of the connected global population. To meet the insatiable demand for compute, Arm is delivering advanced solutions that allow the world’s leading technology companies to unleash the unprecedented experiences and capabilities of AI. Together with the world’s largest computing ecosystem and 22 million software developers, we are building the future of AI on Arm. [Company profile](https://www.wearedevelopers.com/companies/3413-arm) ### More Jobs at Arm - [Senior Board Test Engineer](https://www.wearedevelopers.com/jobs/ext/4603051-senior-board-test-engineer) - [Principal Technical Program Manager](https://www.wearedevelopers.com/jobs/ext/4608433-principal-technical-program-manager) - [Senior Board Test Engineer](https://www.wearedevelopers.com/jobs/ext/4601066-senior-board-test-engineer) - [Salesforce Data Consultant/Data Migration Consultant](https://www.wearedevelopers.com/jobs/ext/4600143-salesforce-data-consultant-data-migration-consultant) - [Principal Technical Program Manager](https://www.wearedevelopers.com/jobs/ext/4609142-principal-technical-program-manager)