Cybersecurity Incident Response Specialist

Cybersecurity Incident Response Specialist at Geotab, owning incident response for the company's government compliance environments, including FedRAMP and CONUS systems. The role can be remote or, for Atlanta-based staff, hybrid.

The specialist monitors and triages security events, leads response, analyses web application logs in Elastic and CrowdStrike, runs threat hunts and IR projects in quieter periods, performs forensics, malware analysis and penetration testing, builds playbooks and tabletop exercises, sets breach communication protocols, and joins a US on-call rotation. Geotab wants three to five years in incident response or security operations, hands-on Elastic, CrowdStrike and SQL with Python, PowerShell and Bash scripting, and GCP experience. Candidates must have lived continuously in the continental US for three years and pass an enhanced background check.