Job description

Working at Atlassian Atlassians can choose where they work – whether in an office, from home, or a combination of the two. That way, Atlassians have more control over supporting their family, personal goals, and other priorities. We can hire people in any country where we have a legal entity. We are looking for an Incident Responder with robust technical skills, expertise in threat analysis, and a solid background in incident management. As a Senior Incident Response Analyst you'll be watching over our corporate environment and cloud services, hunting for signs of compromise, safeguarding the data and systems belonging to Atlassian, as well as those of our Customers and Partners. More than that, you’ll be leading security incidents, responding to security threats, developing and automating response strategies, and collaborating with cross-functional teams to enhance our security posture, and crushing security problems you care about. Your day-to-day will include: • Act as an escalation point for security incidents, collaborating with stakeholders and communicating updates while actively working towards the resolution of incidents. • Investigate and analyze log data stemming from security events across multiple sources to identify signs of compromise, determine scope and assess potential impact. • Conduct post-incident reviews to analyze the root cause, assess the response, and recommend improvements. • Participate in the on-call roster for security incident response. • Deliver technical solutions to mitigate security incidents and enhance incident response capabilities. • Advocate for security best practices and secure coding standards across the organization. • Conduct threat hunts to identify new attack vectors and develop strategies to counteract them. • Research threat actor tactics, techniques and tooling and apply those insights to investigations, threat hunts and response capabilities. • Build and maintain tools and systems to automate response processes and improve efficiency. • Develop and maintain security incident response playbooks and standard operating procedures. • Lead evidence collection and forensic analysis during incidents. • Conduct tabletop exercises and simulations to test and improve incident response readiness. What we look for: • 5+ years of experience in any security domain: Operations, Incident Response, Detection Engineering, Threat Research, or Engineering. • Relevant work experience for responding to incidents and conducting investigations. • Fluency in any modern programming languages (preferably Python, Ruby, Java or Go) or experience scripting to complete security tasks. • Experience with AWS, GCP, or a similar cloud service platform. • Self-motivated and results-oriented. • Experience building and delivering projects from start to finish. • Passion for collaboration and strong interpersonal skills. • Specialization in one or more areas: malware analysis, forensics, threat hunting, network analysis, or cloud endpoint analysis. • Contributions to the security community or open source projects. • Excellent written and verbal communication skills, including the ability to explain technical issues to non-technical stakeholders. More about the team We value diverse skill sets and motivated individuals so that we can learn from one another and engage in interesting projects. We don't just click the same buttons over and over. You will be apart of the Security Detection and Response organization—which includes Incident Response, Detection Engineering, Threat Intelligence, and Security Engineering—a group dedicated to improving the security of our environment, products and engineering practices. We work both independently and in collaboration with development teams as we assess and respond to security issues that might occur with Atlassian products and features. Benefits & Perks Atlassian offers a wide range of perks and benefits designed to support you, your family and to help you engage with your local community. Our offerings include health and wellbeing resources, paid volunteer days, and so much more. To learn more, visit go.atlassian.com/perksandbenefits . About Atlassian At Atlassian, we're motivated by a common goal: to unleash the potential of every team. Our software products help teams all over the planet and our solutions are designed for all types of work. Team collaboration through our tools makes what may be impossible alone, possible together. We believe that the unique contributions of all Atlassians create our success. To ensure that our products and culture continue to incorporate everyone's perspectives and experience, we never discriminate based on race, religion, national origin, gender identity or expression, sexual orientation, age, or marital, veteran, or disability status. All your information will be kept confidential according to EEO guidelines. To provide you the best experience, we can support with accommodations or adjustments at any stage of the recruitment process. Simply inform our Recruitment team during your conversation with them. To learn more about our culture and hiring process, visit go.atlassian.com/crh . In line with local law, identity verification (which may include use of biometric data) is a condition of employment with Atlassian for employment fraud purposes. At Atlassian, we strive to design equitable, explainable, and competitive compensation programs. We follow consistent hiring practices and account for each candidate's skills, knowledge, and experience when setting base pay within the range. Please visit go.atlassian.com/payzones for more information on which locations are included in each of our geographic pay zones. However, please confirm the zone for your specific location with your recruiter. This role may also be eligible for benefits, bonuses, commissions, and equity.

Requirements

Must-haves

Working at Atlassian
Act as an escalation point for security incidents, collaborating with stakeholders and communicating updates while actively working towards the resolution of incidents.
Investigate and analyze log data stemming from security events across multiple sources to identify signs of compromise, determine scope and assess potential impact.
Conduct post-incident reviews to analyze the root cause, assess the response, and recommend improvements.
Participate in the on-call roster for security incident response.
Deliver technical solutions to mitigate security incidents and enhance incident response capabilities.
Advocate for security best practices and secure coding standards across the organization.
Conduct threat hunts to identify new attack vectors and develop strategies to counteract them.
Research threat actor tactics, techniques and tooling and apply those insights to investigations, threat hunts and response capabilities.
Build and maintain tools and systems to automate response processes and improve efficiency.
Develop and maintain security incident response playbooks and standard operating procedures.
Lead evidence collection and forensic analysis during incidents.
Conduct tabletop exercises and simulations to test and improve incident response readiness.
5+ years of experience in any security domain: Operations, Incident Response, Detection Engineering, Threat Research, or Engineering.
Relevant work experience for responding to incidents and conducting investigations.
Fluency in any modern programming languages (preferably Python, Ruby, Java or Go) or experience scripting to complete security tasks.
Experience with AWS, GCP, or a similar cloud service platform.
Self-motivated and results-oriented.
Experience building and delivering projects from start to finish.
Passion for collaboration and strong interpersonal skills.
Specialization in one or more areas: malware analysis, forensics, threat hunting, network analysis, or cloud endpoint analysis.
Contributions to the security community or open source projects.
Excellent written and verbal communication skills, including the ability to explain technical issues to non-technical stakeholders.
More about the team

Nice-to-haves

None flagged.

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

pythonjavagoawsgcp

Platform: atlassian
Effort: medium