Senior Incident Response Analyst

<p>At Zimmer Biomet, we believe in pushing the boundaries of innovation and driving our mission forward. As a global medical technology leader for nearly 100 years, a patient’s mobility is enhanced by a Zimmer Biomet product or technology every 8 seconds. </p><p>As a Zimmer Biomet team member, you will share in our commitment to providing mobility and renewed life to people around the world. To support our talented team, we focus on development opportunities, robust employee resource groups (ERGs), a flexible working environment, location specific competitive total rewards, wellness incentives and a culture of recognition and performance awards.  We are committed to creating an environment where every team member feels inspired, invested, cared for, valued, and have a strong sense of belonging.</p><br><div><div style='padding: 10px 0px;border: 1px solid transparent;'><div style='font-size:16px;word-wrap: break-word;'><H2 style='font-size: 1em; margin: 0px'>What You Can Expect</H2> </div><div><p><br />We’re seeking a Senior Incident Response Analyst to join our cybersecurity incident response team. This is a hands-on technical role responsible for investigating and responding to cybersecurity incidents in a global follow-the-sun operating model, including participation in on-call and major incident rotations.</p></div></div><div style='padding: 10px 0px;border: 1px solid transparent;'><div style='font-size:16px;word-wrap: break-word;'><H2 style='font-size: 1em; margin: 0px'>How You'll Create Impact</H2> </div><div><p> </p><ul><li>Lead complex, high-risk security incidents through the full response lifecycle—from detection and investigation through containment, eradication, recovery, root cause analysis, stakeholder communications, and post-incident reporting.</li><li>Conduct advanced forensic analysis, threat hunting, and evidence collection across endpoint, network, identity, SaaS, and cloud environments.</li><li>Drive post-incident reviews and translate lessons learned into detection improvements, security controls, operational processes, and prevention strategies.</li><li>Develop, maintain, and optimize SIEM and SOAR detections, automation workflows, integrations, log ingestion pipelines, and response playbooks.</li><li>Analyze operational metrics, alert quality, and detection performance to prioritize tuning, automation, and threat detection improvements. </li><li>Mentor and collaborate with other team members to improve the overall security program. </li></ul></div></div><div style='padding: 10px 0px;border: 1px solid transparent;'><div style='font-size:16px;word-wrap: break-word;'><H2 style='font-size: 1em; margin: 0px'>What Makes You Stand Out</H2> </div><div><p> </p><ul><li>SIEM/SOAR: Experience investigating and improving detection/automation content. Set up integrations to facilitate log ingestion. Build custom parsers as needed. </li><li>EDR/XDR: Experience investigating endpoint threats and using endpoint telemetry for containment/remediation.</li><li>OS & Networking: Windows and Linux; TCP/IP, DNS (and related enterprise networking fundamentals).</li><li>Scripting/Automation: Proficiency with at least one (Python, PowerShell, Bash) to support analysis and workflow automation.</li><li>Cloud: Experience investigating cloud-native security incidents within Azure, AWS, or GCP, including identity, storage, compute, logging, and access control events.</li></ul></div></div><div style='padding: 10px 0px;border: 1px solid transparent;'><div style='font-size:16px;word-wrap: break-word;'><H2 style='font-size: 1em; margin: 0px'>Your Background</H2> </div><div><p> </p><ul><li>5–8+ years of experience in an incident response or engineering role.</li><li>Strong analytical and investigation skills with demonstrated ability to handle complex incidents.</li><li>Ability to communicate clearly and produce concise, defensible incident documentation.</li><li>Advanced knowledge of Microsoft 365 security architecture, including SharePoint Online, email security, Conditional Access, Defender XDR, and identity threat detection and response, with the ability to lead complex cloud incident investigations.</li><li>Preferred: GCIH, GCFA, SIEM specific certifications (Pentest+, OSCP), Relevant Microsoft certs (SC-200, SC-300, SC-400, SC-500) </li><li>Nice to have: CISSP, CCSP, CEH, GSOC, GCIA, GCTI, Security, or equivalent.</li></ul><p><strong><br />Work Model / Coverage<br /><br /></strong></p><ul><li>Supports a global follow-the-sun incident response model.</li><li>Participation in on-call and major incident rotations is required.</li></ul><p><strong><br /><br />Expected Compensation</strong> - $125,000-$145,000 base salary</p></div></div></div><br><p>EOE</p>