Security Incident Response Analyst

What we’re looking for

As an Incident Response Analyst, you will play a key role in responding to security and privacy incidents impacting SurveyMonkey. Reporting to the Head of Security, you will lead the coordination, triage, and management of the incident response process, working closely with departments and updating senior leadership as needed.

What you’ll be working on

• Manage SurveyMonkey’s incident response process, including design, implementation, and refinement of related procedures and guidelines.
• Oversee the implementation and maintenance of incident response tools (e.g., Rootly, SharePoint, Confluence, PagerDuty) and lead automation projects to streamline workflows.
• Design and execute tabletop exercises to test and improve the effectiveness of the response process, integrating feedback for continuous improvement.
• Develop and report on incident response metrics for both technical teams and executives, analyzing trends to provide actionable insights.
• Create and maintain incident playbooks and standardized procedures for effective response and resolution.
• Manage the on-call schedule and participate in security on-call rotations.
• Lead efforts to respond, investigate, mitigate, and resolve incidents, ensuring protocols are followed and proper communication is maintained with stakeholders.
• Conduct post-incident retrospectives, driving action items to closure and ensuring root cause fixes are implemented.
• Collaborate with teams across Security, Product, Engineering, IT, and Business Systems to enhance detection and response capabilities.

We’d love to hear from people with

• Ability to work in a dynamic, on-call environment.
• 5+ years of experience in cybersecurity and/or information security, or equivalent expertise.
• Hands-on experience in security incident response or security project/program management.
• Strong analytical, documentation, and communication skills.
• Proven ability to collaborate across functions and levels.
• Familiarity with security tools such as SIEM, endpoint detection, and cloud solutions.
• Fluency in English at a B2+ level (written and oral).

This opportunity is hybrid and requires you to work from the SurveyMonkey office in Heredia 3 days per week.

Please apply using an English version of your resume/CV.

#LI-Hybrid