Senior Security Incident Responder
Apply NowLocation:
US
Company:
Avalara is a leading technology company specializing in cloud compliance solutions for tax processing.
Summary:
Avalara seeks an experienced Incident Response Senior Analyst to enhance its security capabilities through incident detection, investigation, and mitigation. Candidates need 5+ years in security incident response, knowledge of various security domains, and a bachelor's degree in a relevant field.
Requirements:
Hard Skills: log analysis, network security, digital forensics, incident response investigations, scripting, coding using Python or an equivalent language.
Credentials: Bachelor’s degree in computer science, information security, or relevant experience.
Experience: 5+ years’ experience in Security Incident Response., 5+ years' experience across the information security domain, including familiarity with endpoint, email, network, cloud security, vulnerability management, incident response, and threat intelligence., Experience with log analysis, network security, digital forensics, and incident response investigations.
Job Description:
Job Description
Avalara is looking for an experienced Incident Response Senior Analyst to join the Detection and Response Team. You will have a track record in incident response, demonstrating advanced technical expertise and leadership capabilities. As an Incident Response Senior Analyst, you will play a crucial role in protecting Avalara. This includes detecting, investigating, and mitigating security incidents. You will be an individual contributor in improving our incident response capabilities and you will work fully remote out of the United States. #LI-Remote
This role is not eligible for visa sponsorship.
What Your Responsibilities Will Be
You will:
-
Perform incident response activities and work streams as the Incident Response Senior Analyst.
-
Monitor security systems, including Intrusion Detection Systems (IDS), Endpoint Detection and Response (EDR) platforms, software firewalls, and Security Information and Event Management (SIEM) platforms. Gather and analyze evidence from affected systems, logs, and network traffic.
-
Conduct detailed investigations of security incidents to determine the cause, scope, and effect. Document all aspects of security incidents, including timelines, actions taken, and lessons learned.
-
Develop, document, and implement strategies, runbooks, capabilities, and techniques for incident response.
-
Perform forensic analysis of compromised systems to identify the techniques and tactics used by attackers, or as directed by Legal.
-
Work with security engineering and other teams to build solutions for analyzing security events at scale and protecting Avalara from threats.
-
Collaborate with teams including IT, Security Operations, Legal, HR, and Compliance to manage and reduce incidents.
-
Strengthen goals for measuring response effectiveness and provide detailed reporting to company partners.
-
Stay up to date with the latest security threats, vulnerabilities, and incident response techniques through ongoing training and professional development.
-
Be a subject matter expert in incident response, representing the team in meetings, audits, and presentations.
-
Participate in rotating On Call shifts that use a paging system in case a security event requires attention.
What You'll Need to be Successful
-
5+ years’ experience in Security Incident Response.
-
5+ years' experience across the information security domain, including familiarity with endpoint, email, network, cloud security, vulnerability management, incident response, and threat intelligence.
-
Experience with log analysis, network security, digital forensics, and incident response investigations.
-
Create both short-term and long-term plans for ongoing improvement.
-
You enjoy communicating and collaborating with different partners.
-
Perform and coordinate tasks during high-pressure situations.
-
Experience scripting / coding using Python or an equivalent language.
-
Bachelor’s degree in computer science, information security, or relevant experience.
-
Certifications related to digital forensics and incident response.
How We'll Take Care of You
Total Rewards
In addition to a great compensation package, paid time off, and paid parental leave, many Avalara employees are eligible for bonuses.
Health & Wellness
Benefits vary by location but generally include private medical, life, and disability insurance.
Inclusive culture and diversity
Avalara strongly supports diversity, equity, and inclusion, and is committed to integrating them into our business practices and our organizational culture. We also have a total of 8 employee-run resource groups, each with senior leadership and exec sponsorship.
Learn more about our benefits by region here: Avalara North America
What You Need To Know About Avalara
We’re Avalara. We’re defining the relationship between tax and tech.
We’ve already built an industry-leading cloud compliance platform, processing nearly 40 billion customer API calls and over 5 million tax returns a year, and this year we became a billion-dollar business. Our growth is real, and we’re not slowing down until we’ve achieved our mission - to be part of every transaction in the world.
We’re bright, innovative, and disruptive, like the orange we love to wear. It captures our quirky spirit and optimistic mindset. It shows off the culture we’ve designed, that empowers our people to win. Ownership and achievement go hand in hand here. We instill passion in our people through the trust we place in them.
We’ve been different from day one. Join us, and your career will be too.
We’re An Equal Opportunity Employer
Supporting diversity and inclusion is a cornerstone of our company — we don’t want people to fit into our culture, but to enrich it. All qualified candidates will receive consideration for employment without regard to race, color, creed, religion, age, gender, national orientation, disability, sexual orientation, US Veteran status, or any other factor protected by law. If you require any reasonable adjustments during the recruitment process, please let us know.