Product Security Incident Response Analyst

This is a Fully Remote Job

About Our Client:

The organization operates a leading platform dedicated to software development, serving over 180 million developers and more than 77,000 organizations. It supports a wide range of users, including a significant portion of Fortune 100 companies, by facilitating collaboration and providing advanced tools powered by automation to build, scale, and deliver secure software.

About the Opportunity:

The PRODUCT SECURITY INCIDENT RESPONSE ANALYST role focuses on designing and implementing solutions to manage and resolve product security incidents. This position enhances incident response capabilities through automation and policy improvements, contributing to stronger security posture and risk mitigation. The role involves close collaboration with various teams to ensure security integration and effective communication of risks.

Responsibilities:

• Develop and implement scalable solutions for product security incidents across all products.
• Perform data analysis and forensic investigations to resolve security incidents.
• Continuously improve incident response processes.
• Identify and implement automation to increase efficiency in incident response.
• Develop and maintain automation tools and scripts.
• Collaborate with teams to prioritize automation initiatives.
• Promote security risk awareness and best practices internally and externally.
• Communicate technical security risks clearly to nontechnical audiences.
• Prepare reports on security risks and remediation strategies.
• Work with architecture teams to integrate security into system design.
• Analyze metrics and KPIs to detect incident trends and escalate as needed.
• Use multiple data sources for anomaly detection and analysis.
• Recommend telemetry and measurement improvements.
• Participate actively in incident response activities.
• Propose innovative solutions based on pattern recognition.
• Ensure compliance with security regulations and conduct risk assessments.
• Manage communications and stakeholder engagement during incidents.
• Draft and publish CVEs in coordination with relevant teams.

Requirements:

• 7+ years of experience in product security, security analysis, research, cybersecurity, or security engineering; or equivalent combination of education and experience.
• Minimum 1 year investigating software vulnerabilities within the development lifecycle using application security tools and collaborating with engineering teams on remediation.
• At least 1 year experience working with GitHub or other open-source software platforms.

Preferred Qualifications:

• 9+ years experience with substantial hands-on work in product security incident investigation and remediation coordination.
• Experience drafting and publishing CVEs.
• Relevant certifications in penetration testing, incident handling, or digital forensics are advantageous.
• Proficiency in SAST, DAST, and SCA tools beyond scanner operation.
• Experience with open-source software platforms beneficial for understanding collaborative environments.

Pay Range and Compensation Package:

• The pay range and compensation package for this role will be determined based on the candidate's experience, skills, and other relevant factors.

Equal Opportunity Statement: Our client is an equal opportunity employer. They celebrate diversity and are committed to creating an inclusive environment for all employees. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, or national origin.

Note:

TalentHop is a recruitment partner of this role. Please note that all employment decisions, including candidate assessment, interviews, hiring, compensation, and employment terms, are made exclusively by the hiring employer.