Senior Incident Response Analyst @ Atlassian

Atlassians can choose where they work – whether in an office, from , or a combination of the two. That way, Atlassians have more control over supporting their family, personal goals, and other priorities. We can hire people in any country where we have a legal entity.

We are looking for an Incident Responder with robust technical skills, expertise in threat analysis, and a solid background in incident management. As a Senior Incident Response Analyst, you'll be watching over our corporate environment and cloud services, hunting for signs of compromise, safeguarding the data and systems belonging to Atlassian, as well as those of our Customers and Partners. More than that, you’ll be leading security incidents, responding to security threats, developing and automating response strategies, and collaborating with cross-functional teams to enhance our security posture, and crushing security problems you care .

Your day-to-day will include:

Act as an escalation point for security incidents, collaborating with stakeholders and communicating updates while actively working towards the resolution of incidents.

Act as an escalation point for security incidents, collaborating with stakeholders and communicating updates while actively working towards the resolution of incidents.

Investigate and analyze log data stemming from security events across multiple sources to identify signs of compromise, determine scope and assess potential impact.

Investigate and analyze log data stemming from security events across multiple sources to identify signs of compromise, determine scope and assess potential impact.

Conduct post-incident reviews to analyze the root cause, assess the response, and recommend improvements.

Conduct post-incident reviews to analyze the root cause, assess the response, and recommend improvements.

Participate in the on-call roster for security incident response.

Participate in the on-call roster for security incident response.

Deliver technical solutions to mitigate security incidents and enhance incident response capabilities.

Deliver technical solutions to mitigate security incidents and enhance incident response capabilities.

Advocate for security best practices and secure coding standards across the organization.

Advocate for security best practices and secure coding standards across the organization.

Conduct threat hunts to identify new attack vectors and develop strategies to counteract them.

Conduct threat hunts to identify new attack vectors and develop strategies to counteract them.

Research threat actor tactics, techniques and tooling and apply those insights to investigations, threat hunts and response capabilities.

Research threat actor tactics, techniques and tooling and apply those insights to investigations, threat hunts and response capabilities.

Build and maintain tools, automations and AI-assisted workflows that improve the speed, quality and scalability of security investigations and response

Build and maintain tools, automations and AI-assisted workflows that improve the speed, quality and scalability of security investigations and response

Develop and maintain security incident response playbooks and standard operating procedures.

Develop and maintain security incident response playbooks and standard operating procedures.

Lead evidence collection and forensic analysis during incidents.

Lead evidence collection and forensic analysis during incidents.

Conduct tabletop exercises and simulations to test and improve incident response readiness.

Conduct tabletop exercises and simulations to test and improve incident response readiness.

5+ years of experience in any security domain: Operations, Incident Response, Detection Engineering, Threat Research, or Engineering.

5+ years of experience in any security domain: Operations, Incident Response, Detection Engineering, Threat Research, or Engineering.

Specialization in one or more areas: malware analysis, forensics, threat hunting, network analysis, or cloud endpoint analysis.

Specialization in one or more areas: malware analysis, forensics, threat hunting, network analysis, or cloud endpoint analysis.

Hands-on exposure to AI-assisted tools or workflows in incident response or security operations, with an understanding of their practical applications and limitations.

Hands-on exposure to AI-assisted tools or workflows in incident response or security operations, with an understanding of their practical applications and limitations.

Relevant work experience for responding to incidents and conducting investigations.

Relevant work experience for responding to incidents and conducting investigations.

Fluency in any modern programming languages (preferably Python, Ruby, Java or Go) or experience scripting to complete security tasks.

Fluency in any modern programming languages (preferably Python, Ruby, Java or Go) or experience scripting to complete security tasks.

Experience with AWS, GCP , or a similar cloud service platform.

Experience with AWS, GCP , or a similar cloud service platform.

Experience building and delivering projects from start to finish.

Experience building and delivering projects from start to finish.

Contributions to the security community or open source projects.

Contributions to the security community or open source projects.

Excellent written and verbal communication skills, including the ability to explain technical issues to non-technical stakeholders.

Excellent written and verbal communication skills, including the ability to explain technical issues to non-technical stakeholders.

We value diverse skill sets and motivated individuals so that we can learn from one another and engage in interesting projects. We don't just click the same buttons over and over. You will be apart of the Security Detection and Response organization—which includes Incident Response, Detection Engineering, Threat Intelligence, and Security Engineering—a group dedicated to improving the security of our environment, products and engineering practices. We work both independently and in collaboration with development teams as we assess and respond to security issues that might occur with Atlassian products and features.

At Atlassian, we strive to design equitable, explainable, and competitive compensation programs. We follow consistent hiring practices and account for each candidate's skills, knowledge, and experience when setting base pay within the range.

This role may also be eligible for benefits, bonuses, commissions, and equity.

In Poland , for this role, our current base pay range for new hires is:

Poland : 282.600 zł - 368.950 zł

At Atlassian, we're motivated by a common goal: to unleash the potential of every team. Our software products help teams all over the planet and our solutions are designed for all types of work. Team collaboration through our tools makes what may be impossible alone, possible together.

We believe that the unique contributions of all Atlassians create our success. To ensure that our products and culture continue to incorporate everyone's perspectives and experience, we never discriminate based on race, religion, national origin, gender identity or expression, sexual orientation, age, or marital, veteran, or disability status. All your information will be kept confidential according to EEO guidelines.

To provide you the best experience, we can support with accommodations or adjustments at any stage of the recruitment process. Simply inform our Recruitment team during your conversation with them.

In line with local law, identity verification (which may include use of biometric data) is a condition of employment with Atlassian for employment fraud purposes.