Incident Response Analyst

About the Role

Day‑to‑day duties include analyzing logs from firewalls, servers, applications, proxies, Windows, and Active Directory to detect anomalous activity, performing basic forensics and malware analysis, and documenting findings in a case‑management system. The analyst also helps create and maintain process tools, documentation, and collaborates on improving the Security Orchestration Platform. All stages of incident response—from detection through post‑mortem—are performed while maintaining strict confidentiality and data integrity. • Monitor, identify, triage, and investigate security events from endpoint (EDR), network, and cloud tools • Analyze firewall, server, and application logs to detect anomalies and produce investigation reports • Review proxy, Windows, Active Directory logs, and malicious code to contain, eradicate, and recover from incidents • Create and maintain process tools and documentation for incident response • Execute all incident‑response stages from detection through post‑mortem • Collaborate with stakeholders to enhance the Security Orchestration Platform • Document incident notes in the case‑management solution • Perform basic forensics and malware analysis following established playbooks • Work in a 24/7 environment with rotating night shifts as dictated by business requirements • Maintain a high level of confidentiality and data integrity

Key Responsibilities

• ▸log analysis
• ▸incident response
• ▸malware analysis
• ▸forensics
• ▸security orchestration
• ▸documentation

What You Bring

The Incident Response Analyst monitors, identifies, assesses, contains, and responds to information‑security events across a large and complex environment. The role requires deep knowledge of system security design, network and cloud security best practices, threat‑actor tactics, and user‑behavior analytics. The analyst works within an established security team and partners with other groups to remediate issues and drive incident response initiatives. The position operates on a 24/7 schedule with rotating night shifts based on business needs, and requires availability for off‑hours, weekend, and holiday support. Candidates must hold a BS in Computer Science, Information Security, or equivalent experience, and possess at least two years of cyber‑security experience in incident response. Technical expertise should cover malware analysis, host analysis, digital forensics, operating systems (Windows, Linux, macOS), and security tools such as SIEM, SOAR, EDR, and cloud platforms (AWS, Azure). Strong critical‑thinking, analytical, organizational, and communication skills are essential, as is the ability to design incident‑response playbooks and work effectively within a team. Advanced interpersonal abilities to promote ideas and collaborate across the organization are preferred, along with security certifications such as GCIH, GCFA, GCFE, or cloud‑security credentials. • BS in Computer Science, Information Security, or equivalent professional experience • 2+ years of cyber‑security experience in incident response • Deep expertise in malware analysis, host analysis, and digital forensics • Strong understanding of security operations and incident‑response processes • Experience with security monitoring, log analysis, and forensic tools • Proficiency with Windows, Linux, and macOS operating systems • Hands‑on experience with SIEM, SOAR, EDR, network, AWS, and Azure security tools • Excellent critical‑thinking, analytical, organizational, and teamwork skills • Strong verbal and written communication abilities • Ability to design playbooks for responding to security incidents • Availability to support off‑hours, weekends, and holidays as needed • Advanced interpersonal skills for cross‑level collaboration • Security certifications such as GCIH, GCFA, GCFE, AWS, or Azure cloud security

Requirements

• ▸malware analysis
• ▸digital forensics
• ▸siem
• ▸aws
• ▸bs computer
• ▸gcih

Benefits

Autodesk creates software that enables innovators to design and build a better world, fostering a culture of belonging, diversity, and continuous learning. Compensation includes a competitive base salary, potential bonuses, stock grants, and a comprehensive benefits package, with salary transparency based on experience and location. The company encourages candidates to join its talent community and emphasizes a supportive, inclusive work environment.

Work Environment

Office Full-Time