Senior Incident Response Analyst

Position Details
Position Information
Recruitment/Posting Title
Senior Incident Response Analyst

Job Category
Staff & Executive - Information Technology

Department
OIT - Enterprise Infrastructur

Overview
Rutgers, The State University of New Jersey, is a leading national research university and the State of New Jersey's preeminent, comprehensive public institution of higher education. As one of the largest employers in the State of New Jersey, Rutgers University is committed not only to the students and the State that we serve, but also to the faculty and staff who work on our campuses. For two consecutive years, Rutgers is ranked on Forbes' list of America's Best Large Employers. Rutgers holds #64 of 500 employers and is the #1 New Jersey employer on the publication's 2023 list. Rutgers' commitment to its employees includes maintaining and fostering a safe, diverse, and respectful workplace environment, creating employment opportunities for our nation's military veterans, and ensuring accessibility and accommodation for individuals with disabilities.

Posting Summary
Rutgers, The State University of New Jersey, is seeking a Senior Incident Response Analyst for the Office of Information Technology. This position will report tothe Associate Director.

Among the key duties of this position are the following:

• Performs daily operations of the incident detection and response program, which includes finding evidence of threats or suspicious behavior and leveraging data to improve controls and processes.
• Monitors information security incidents throughout Rutgers' computing environment.
• Serves as an escalation point for Incident Response Analysts.
• Provides expert-level analytic, investigative and forensic support of complex security incidents to detect and remediate security threats on networks, workstations, servers, and other connected devices.
• Provides expert level advice and services to business units throughout the University while participating in all phases of Rutgers' Integrated Incident Response Program (Prepare, Detect & Analyze, Contain, Eradicate, Recovery, Report, Remediate).

FLSA
Exempt

Grade
07

Salary Details

Minimum Salary
108147.000

Mid Range Salary
136809.000

Maximum Salary
165471.000

Offer Information
The final salary offer may be determined by several factors, including, but not limited to, the candidate's qualifications, experience, and expertise, and availability of department or grant funds to support the position. We also take into consideration market benchmarks, if and when appropriate, and internal equity to ensure fair compensation relative to the university's broader compensation structure. We are committed to offering competitive and flexible compensation packages to attract and retain top talent.

Benefits
Rutgers provides a comprehensive benefits package to eligible employees. The specific benefits vary based on the position and may include:

• Medical, prescription drug, and dental coverage
• Paid vacation, holidays, and various leave programs
• Competitive retirement benefits, including defined contribution plans and voluntary tax-deferred savings options
• Employee and dependent educational benefits (when applicable)
• Life insurance coverage
• Employee discount programs

Position Status
Full Time

Working Hours

Standard Hours
37.50

Daily Work Shift

Work Arrangement
Consistent with the current application of Rutgers Policy 60.3.22 or the applicable provisions of relevant collective negotiations agreements, this position may be eligible for a hybrid work arrangement. Flexible work arrangements are not permanent, subject to change or discontinuation, and contingent on the employee receiving approval in the View email address on click.appcast.io Application System.

Union Description
Admin Assembly (MPSC)

Payroll Designation
PeopleSoft

Seniority Unit

Terms of Appointment
Staff - 12 month

Position Pension Eligibility
ABP

Qualifications
Minimum Education and Experience

• Bachelor's degree or equivalent education and experience plus five years relevant experience in specialty area
• 5+ years of information security experience; vulnerability scanning, penetration testing and/or security operations
• 5+ years of experience working in an enterprise technical environment, preferably in a customer-service based organization

Certifications/Licenses

Required Knowledge, Skills, and Abilities

• Knowledge in a wide array of cybersecurity tools and their capabilities as they pertain to the detection and mitigation of Cyber Threats (SIEM, EDR, NGFW, DLP, IPS/IDS, etc.)
• Knowledge of industry standard cybersecurity frameworks (Mitre ATT&CK, NIST Incident Response, etc.)
• Understanding of complex enterprise networks to include routing, switching, firewalls and common networking protocols ( DNS, SMB, etc.)
• Experience with Regex and at least one common scripting language (PERL, Python, PowerShell)
• Experience with an enterprise SIEM platform
• Excellent verbal and written communication skills
• Ability to communicate technical problems succinctly and accurately
• Ability to handle multiple, shifting priorities and a large volume of technical problem resolution
• Ability to apply and document new technical knowledge and procedures
• Ability to work well with peers and junior staff in a team oriented, cooperative spirit

Preferred Qualifications

• Degree in a related field such as Information Security.
• 3+ years of experience in incident response, threat hunting, SOC operations, digital forensics, or detection engineering.
• Relevant certifications such as GCFA, GCIH (or other SANS certifications), CISSP, CySA+
• Experience as a key member of a cybersecurity team (SOC, Incident Response, Threat Intel, Malware Analysis, Live Forensics, IDS/IPS Analysis)
• Experience investigating identity-centric attacks, cloud compromise, phishing, business email compromise, and SaaS-based incidents.
• Knowledge of TTPs related to cyber-crime, malware, botnets, social engineering, APTs and other threats.
• Experience developing, tuning, and maintaining detection content including SIEM correlation rules, behavioral analytics, dashboards, and automation workflows.
• Expertise in network and host-based analysis and investigation

Equipment Utilized

• Vulnerability analysis/Penetration testing
• Packet capture and Netflow
• Firewalls/IPS/IDS/EDR
  
• Syslog/SIEM/Dashboards & Alerting/SOAR
  
• Threat hunting/Malware Analysis
• Windows/Linux/macOS

Physical Demands and Work Environment

• Must be able to lift up to 50 pounds for the purpose of moving computer equipment.

Special Conditions

Posting Details
Posting Number
26ST1709

Posting Open Date
09/02/2026

Special Instructions to Applicants

Regional Campus
Rutgers University-New Brunswick

Home Location Campus
Busch (RU-New Brunswick)

City
Piscataway

State
NJ

Location Details

Pre-employment Screenings
All offers of employment are contingent upon successful completion of all pre-employment screenings.

Immunization Requirements

Under Policy 100.3.1 Immunization Policy for Covered Individuals, if employment will commence during Flu Season, Rutgers University may require certain prospective employees to provide proof that they are vaccinated against Seasonal Influenza for the current Flu Season, unless the University has granted the individual a medical or religious exemption. Additional infection control and safety policies may apply. Prospective employees should speak with their hiring manager to determine which policies apply to the role or position for which they are applying. Failure to provide proof of vaccination for any required vaccines or obtain a medical or religious exemption from the University will result in rescission of a candidate's offer of employment or disciplinary action up to and including termination.

Equal Employment Opportunity Statement
It is university policy to provide equal employment opportunity to all its employees and applicants for employment regardless of their race, creed, color, national origin, age, ancestry, nationality, marital or domestic partnership or civil union status, sex, pregnancy, gender identity or expression, disability status, liability for military service, protected veteran status, affectional or sexual orientation, atypical cellular or blood trait, genetic information (including the refusal to submit to genetic testing), or any other category protected by law. As an institution, we encourage all qualified applicants to apply. For additional information please see the Non-Discrimination Statement at the following web address: