{"id":1828826,"url":"https://alion.io/job/atlassian-principal-incident-response-analyst","title":"Principal Incident Response Analyst","company":{"id":182,"name":"Atlassian","domain":"atlassian.com","url":"https://alion.io/company/atlassian","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Career site","truth_index":{"grade":"A","score":100,"open_postings":21,"ghost_share":0,"stale_share":0,"repost_share":0.048,"time_to_fill_p50_days":10,"computed_at":"2026-11-02T06:13:15Z"}},"role":"Security","role_family":"Security","seniority":"lead","employment_type":null,"work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"posting_text","remote_working_hours":null,"hiring_geo_confidence":"explicit","locations":["Sydney, Australia"],"countries":["AU"],"hiring_countries":["AU"],"hiring_countries_total":1,"salary":null,"salary_estimate":{"min_usd":112000,"max_usd":291000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":753},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"GCP","optional":false},{"name":"Python","optional":false}],"status":"live","first_seen_at":"2026-10-04T11:58:41Z","employer_posted_date":"2026-10-04","last_verified_at":"2026-11-02T14:05:37Z","board_verified":true,"closed_at":null,"days_open":29,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":29},"description":"At Atlassian, the Principal Incident Responser plays a critical role in maintaining the security and integrity of our data and environment. This position, based in Australia, is key to the team's planning and execution of work that advances our ability to handle incidents from initial triage to remediation. This involves developing and implementing incident response tools, systems, and playbooks, managing information security incidents, and delivering projects that advance our security posture. The ideal candidate has a vast background in different security domains, strong problem-solving abilities, and excellent communication skills. Within the Security Detection and Response team, we value teamwork, innovation, and dedication.\nResponsibilities\nResponsibilities\nLead the region's security incident response, providing technical leadership during critical (Severity 0/1) incidents by driving complex investigations, cross-team coordination, and resolution.\n\nManage all incident-related communications, providing clear status updates to executives, management, and key stakeholders such as Legal, Privacy, and Communications.\n\nServe as the primary liaison with external bodies, including law enforcement, CERTs, and ISACs, during and after incidents.\n\nCoach and mentor team members in their day-to-day incident response activities.\n\nOwn and deliver projects to advance the team's incident response capabilities, including building new tools, systems, and programs that uplift Atlassian's overall security posture.\n\nEnhance team readiness by creating and running regular training exercises and incident response drills.\n\nConduct comprehensive post-incident reviews to identify root causes and drive improvements to the incident response process.\n\nCollaborate with other security teams to develop long-term strategies and plans to prevent future incidents.\n\nProduce and disseminate threat intelligence specific to Atlassian's products and infrastructure.\n\nStay current with the latest security trends, threats, and technologies to ensure the team remains prepared for emerging risks.\n\nQualifications\nQualifications\nBachelor's degree in Computer Science, Information Security, or a related field.\n\nAt least 5 years of experience in security incident response, including leading high-severity incidents for enterprises and coordinating response efforts across multiple teams.\n\nSpecialization in two or more of the following areas: Malware Analysis, Forensics, Threat Hunting, Network Analysis, or Cloud Endpoint Analysis.\n\nStrong technical foundation in security technologies (e.g., firewalls, IDS), cloud platforms (GCP), and network protocols.\n\nExperience building and maintaining security tools using a scripting or programming language (e.g., Python, Go).\n\nExpertise in creating and maintaining incident response playbooks.\n\nExcellent written and oral communication skills, with strong analytical abilities and the capacity to work effectively under high pressure.\n\nMore about the team\nWe value diverse skill sets and motivated individuals so that we can learn from one another and engage in interesting projects. We don't just click the same buttons over and over. You will be apart of the Security Detection and Response Organization-which includes Incident Response, Detection Engineering, Threat Intelligence, and Security Engineering-a group dedicated to improving Atlassian’s security posture, products and engineering practices.\nBenefits & Perks\nAtlassian offers a wide range of perks and benefits designed to support you, your family and to help you engage with your local community. Our offerings include health and wellbeing resources, paid volunteer days, and so much more. To learn more, visit go.atlassian.com/perksandbenefits.\nAbout Atlassian\nAt Atlassian, we're motivated by a common goal: to unleash the potential of every team. Our software products help teams all over the planet and our solutions are designed for all types of work. Team collaboration through our tools makes what may be impossible alone, possible together.\nWe believe that the unique contributions of all Atlassians create our success. To ensure that our products and culture continue to incorporate everyone's perspectives and experience, we never discriminate based on race, religion, national origin, gender identity or expression, sexual orientation, age, or marital, veteran, or disability status. All your information will be kept confidential according to EEO guidelines.\nTo provide you the best experience, we can support with accommodations or adjustments at any stage of the recruitment process. Simply inform our Recruitment team during your conversation with them.\nTo learn more about our culture and hiring process, visit go.atlassian.com/crh .\nIn line with local law, identity verification (which may include use of biometric data) is a condition of employment with Atlassian for employment fraud purposes.","description_format":"text","description_chars":4916,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"Australia","iso":"AU","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Incident Response","IT Service & Asset Management","Developer Tools","Intranet & Knowledge Management"],"lifecycle":[{"event":"open","at":"2026-10-04T11:58:41Z"}],"visa":[],"liveness":{"score":23,"band":"cold","label":"Long shot","p_open":1,"p_active":0.655,"p_room":0.35,"age_days":28,"expected_fill_days":10,"reasons":["conf:0","velocity","win:tail","comp:brand"],"computed_at":"2026-11-02T06:13:15Z"},"pay":null,"html_url":"https://alion.io/job/atlassian-principal-incident-response-analyst","json_url":"https://alion.io/job/atlassian-principal-incident-response-analyst.json","meta":{"generated_at":"2026-11-02T15:43:16Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":21790,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-03T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":182},"rest":"https://alion.io/mcp/rest/get_company?id=182"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fatlassian-principal-incident-response-analyst"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fatlassian-principal-incident-response-analyst"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fatlassian-principal-incident-response-analyst"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/atlassian-principal-incident-response-analyst\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fatlassian-principal-incident-response-analyst"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":1828826}},{"tool":"search_jobs","arguments":{"company":"atlassian.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":1828826},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}