Senior Incident Response Analyst

About the role

We are looking for a Senior Incident Response Analyst to join GoTo’s security team. You will lead the detection, investigation and remediation of security incidents across cloud, identity, endpoint and network environments, while driving automation and AI‑enhanced capabilities.

Key responsibilities

• Identify, assess and manage security incidents across cloud, identity, endpoint, and network environments.
• Lead incident response activities including investigation, containment, eradication, recovery and post‑incident reviews.
• Serve as the primary escalation point for Information Security Analysts, providing guidance on complex alerts and mentorship.
• Improve SOC tools, workflows, procedures and alerting to reduce noise, optimise detections and increase automation.
• Collaborate with SOC, Offensive Security, Engineering, IT, Cloud and business teams to close detection and response gaps.
• Champion AI, advanced analytics, threat intelligence and industry best practices to boost alert fidelity and analyst productivity.

Required profile

• 3+ years of hands‑on experience in a SOC, incident response or similar cybersecurity role.
• Strong experience securing cloud‑first environments, especially AWS, with exposure to other cloud platforms.
• Proven expertise with modern security tools such as EDR/ITDR, CSPM, SIEM, logging, email protection, network and access security, case‑management platforms and SOAR.
• Deep knowledge of incident response across endpoint, cloud, identity, SaaS and network attack scenarios.
• Experience developing or improving playbooks, runbooks, automated response workflows and AI/ML‑driven security capabilities.
• Excellent written and verbal communication in English (B2+); relevant certifications (e.g., GCFR, AWS Security Specialty, AZ‑500) are a plus.

Required skills

• AWS cloud security
• EDR / ITDR solutions
• CSPM tools
• SIEM platforms
• Logging and email protection
• Network and access security
• Case‑management / workflow platforms
• SOAR orchestration
• Threat intelligence platforms
• AI / ML for security automation
• Playbook and runbook development

What we offer

• Employee benefits and programs designed to support professional growth and personal wellbeing.