Senior Incident Response Analyst

Senior Incident Response Analyst

At Zimmer Biomet, we believe in pushing the boundaries of innovation and driving our mission forward. As a global medical technology leader for nearly 100 years, a patient's mobility is enhanced by a Zimmer Biomet product or technology every 8 seconds.

As a Zimmer Biomet team member, you will share in our commitment to providing mobility and renewed life to people around the world. To support our talented team, we focus on development opportunities, robust employee resource groups (ERGs), a flexible working environment, location specific competitive total rewards, wellness incentives and a culture of recognition and performance awards. We are committed to creating an environment where every team member feels inspired, invested, cared for, valued, and have a strong sense of belonging.

What You Can Expect

We're seeking a Senior Incident Response Analyst to join our cybersecurity incident response team. This is a hands-on technical role responsible for investigating and responding to cybersecurity incidents in a global follow-the-sun operating model, including participation in on-call and major incident rotations.

How You'll Create Impact

• Investigate security alerts and confirmed incidents; determine scope, impact, and root cause.
• Perform malware analysis and log analysis to support incident scoping and response.
• Conduct comprehensive forensic investigations across endpoints and network environments, correlating logs, telemetry, and artifacts to identify attacker activity.
• Execute containment and remediation actions in coordination with security and IT stakeholders.
• Document incidents thoroughly and contribute to shared knowledge bases and repeatable learnings.
• Participate in on-call and major incident rotations as part of the incident response coverage model.
• Support automation and orchestration lifecycle: build, maintain, and improve playbooks/workflows for enrichment, correlation, and initial response actions.
• Track and use operational metrics (e.g., alert quality trends, volume, time-to-triage/response) to prioritize tuning and automation improvements.
• Tune, suppress, and refine noisy detections; validate changes with evidence and ongoing monitoring.
• Mentor and collaborate with other team members.

What Makes You Stand Out

• SIEM/SOAR: Experience investigating and improving detection/automation content.
• EDR/XDR: Experience investigating endpoint threats and using endpoint telemetry for containment/remediation.
• OS & Networking: Windows and Linux; TCP/IP, DNS (and related enterprise networking fundamentals).
• Scripting/Automation: Proficiency with at least one (Python, PowerShell, Bash) to support analysis and workflow automation.
• Cloud: Familiarity with at least one major cloud platform (AWS, Azure, or GCP).

Your Background

• 5–8+ years of experience in a SOC and/or incident response role.
• Strong analytical and investigation skills with demonstrated ability to handle complex incidents.
• Ability to communicate clearly and produce concise, defensible incident documentation.
• Preferred: GCIH, GCFA, CISSP, SIEM specific certifications
• Nice to have: Microsoft SC-200, CEH, GSOC, GCIA, GCTI, Security+

Expected Compensation - $100,000-$125,000 base salary

EOE