Apply on Employer Site

NetSuite · 2 months ago

Sr Incident Response Analyst

Reston, VA, United States

Full-time

Onsite

Mid, Senior Level

3+ years exp

NetSuite is a leading provider of cloud-based business management software, and they are seeking a Senior Incident Response Analyst. The role involves planning, designing, and implementing security architectures while handling security incidents and collaborating with cross-functional teams to ensure compliance and effective response to security events.

Cloud ComputingComputerCRMiOSSaaSSoftware

Responsibilities

Serve as first-line and mid-tier incident handler for security events impacting Oracle’s infrastructure, applications, or customers

Perform triage, scoping, and evidence collection in alignment with Oracle’s Incident Response Standard & Plan

Analyze logs, alerts, and telemetry from SIEM, SOAR, and endpoint tools to determine impact, root cause, and containment strategies

Collaborate with Oracle Cloud Infrastructure (OCI), product security, and LoB SOC teams to coordinate response actions

Document findings, timeline, and technical artifacts in accordance with Oracle’s legal and compliance requirements

Support the Incident Commander and Director of Incident Response in orchestrating enterprise-wide security event response

In designated cases, serve as acting Incident Manager—coordinating cross-functional calls, tracking workstreams, and ensuring timely communication and escalation

Draft and maintain incident situation reports (SITREPs) and executive summaries to ensure leadership visibility throughout events

Track incident metrics, lessons learned, and corrective actions to drive continuous improvement of the IRF

Participate in and help facilitate tabletop exercises, simulation drills, and readiness assessments

Maintain proficiency with Oracle’s IR tools, playbooks, and escalation procedures

Provide feedback on playbook optimization, tooling integration, and process automation

Partner with Legal, Security Communications, Privacy, and Product Security to ensure coordinated response and aligned narratives

Work with the Customer Trust teams to support accurate and timely reporting and attestations when customer or regulatory impact is identified

Support the ICC mission to ensure consistent, transparent, and unified response across all Lines of Business

Qualification

Cybersecurity operationsIncident responseThreat analysisLog analysisCloud architecturesGCIH certificationGCFA certificationCEH certificationCISSP certificationCrisis managementCommunication skillsDocumentation skills