Incident Response Analyst

About the role

Fortinet is seeking an Incident Response Analyst to investigate and respond to security incidents across email, browser and perimeter domains, support customers, and contribute to threat research in a 24/7 environment.

Key responsibilities

• Investigate and respond to workspace security incidents across email, browser security and perimeter security domains.
• Handle investigation requests submitted by customers.
• Perform targeted phishing analysis and investigate new attack campaigns.
• Conduct threat hunting based on attack patterns, behaviors, and indicators.
• Build and improve detections for emerging attack types, tactics and trends.
• Collaborate with development and research teams to provide incident‑driven insights and develop new detection engines.
• Write professional blog posts on incident investigations and attack trends.
• Work rotating shifts as part of a 24/7 operation, including nights, weekends and holidays.

Required profile

• Minimum 3 years of experience in Incident Response or Security Operations.
• Strong understanding of attack vectors such as phishing, BEC, email spoofing, malware and account takeover.
• Knowledge of email security concepts and protocols (SMTP, SPF, DKIM, DMARC, headers, authentication).
• Excellent written and verbal communication in English.
• Team‑player attitude with a proactive, ownership‑driven approach.

Required skills

• Proficient querying using SQL, SPL, KQL or AQL.
• Experience with static and dynamic analysis techniques.
• Scripting and code analysis skills in Python, JavaScript and Visual Basic.