{"id":3832742,"url":"https://alion.io/job/hologic-lead-incident-response-analyst","title":"Lead Incident Response Analyst","company":{"id":720267,"name":"Hologic","domain":"hologic.com","url":"https://alion.io/company/hologic","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Oracle","truth_index":{"grade":"B","score":81,"open_postings":16,"ghost_share":0,"stale_share":0.75,"repost_share":0,"time_to_fill_p50_days":38,"computed_at":"2026-11-06T05:58:05Z"}},"role":"Security","role_family":"Security","seniority":"lead","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Marlborough, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Splunk","optional":false},{"name":"AI Agents","optional":true},{"name":"Linux","optional":true}],"status":"live","first_seen_at":"2026-11-05T18:54:40Z","employer_posted_date":"2026-11-05","last_verified_at":"2026-11-06T06:50:04Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"As a Lead Incident Response Analyst, you will be a senior member of Hologic’s enterprise Threat Detection and Response team. The team provides 24x7x365 monitoring of security-related information sources to detect and manage cyber, privacy, and data-protection incidents affecting Hologic data and infrastructure. The team regularly hunts across the Hologic network for signs of compromise, malware, or unauthorized access; develops and maintains incident response plans, playbooks, and procedures; and collects and analyzes incident response data.\nYour Daily Impact at Hologic:\nLead security incidents from detection through containment, eradication, and recovery, serving as incident commander and coordinating response across IT, Legal, Privacy, Communications, and business stakeholders.\nStay current on relevant vulnerabilities, threat actors, indicators of compromise (IOCs), tactics, techniques, and procedures (TTPs), and emerging trends, and turn that intelligence into actionable insights.\nPartner with Crisis Management to activate and execute crisis procedures when necessary.\nUse threat intelligence to proactively hunt across the Hologic enterprise for anomalous or malicious activity.\nWork with Security Engineering to baseline user behavior and events, and to build new detections and response workflows.\nMentor and guide analysts, review investigations and escalations, and set quality standards for the team’s detections, playbooks, and case documentation.\nLead post-incident reviews, documenting root cause and lessons learned, and drive remediation actions to closure.\nRecommend and build countermeasures based on threat analysis and intelligence.\nDevelop, implement, and maintain security incident playbooks and runbooks, including building SOAR-driven automation workflows.\nRoutinely test and improve operational effectiveness through purple team exercises.\nPrepare and present findings and recommendations through briefings, reports, and dashboards to managers, team leads, and senior leadership.\nThis position supports a 24x7x365 operation and may require shift and/or on-call work, including weekends.\nYou Bring to Hologic:\nBachelor’s degree in a related field, or equivalent experience\n5+ years of information security experience, focused on incident response or threat detection\nDemonstrated experience leading incidents and mentoring or guiding other analysts\nStrong knowledge of incident response principles and processes\nExperience with EDR (Endpoint Detection & Response) analysis and rule creation, and with dissecting attacker tactics and techniques\nExpert-level experience with Splunk, including reporting and data correlation\nExcellent analytical and problem-solving skills\nA learning mindset and enthusiasm for new technologies and security disciplines\nBonus points for:In-depth knowledge of Splunk’s architecture and underpinnings\nPrevious experience in cloud-native or technology environments\nNetwork or Linux knowledge\nProgramming or scripting experience\nExperience developing SOAR workflows, including agentic and non-agentic automation (training provided for candidates new to SOAR)\nSecurity certifications such as GCTI, GCIH, GCIA, or GPEN\n\nThe annualized base salary range for this role is $114,000 - 178,300 and is bonus eligible. Final compensation packages will ultimately depend on factors including relevant experience, skillset, knowledge, geography, education, business needs, and market demand.\nWhy Hologic?\nWe are committed to making Hologic the company where top talent comes to grow. For you to succeed, we want to enable you with the tools and knowledge required and so we provide comprehensive training when you join as well as continued development and training throughout your career.\nIf you have the right skills and experience,apply today!\nAgency and Third Party Recruiter Notice:\nAgencies that submit a resume to Hologic must have a current executed Hologic Agency Agreement executed by a member of the Human Resource Department. In addition Agencies may only submit candidates to positions for which they have been invited to do so by a Hologic Recruiter. All resumes must be sent to the Hologic Recruiter under these terms or they will not be considered.\nHologic, Inc. is proud to be an Equal Opportunity Employer inclusive of disability and veterans","description_format":"text","description_chars":4312,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":true},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Incident Response","Surgical Instruments & Devices","Medical Imaging Systems","Women’s Health & Maternity"],"lifecycle":[{"event":"open","at":"2026-11-05T19:59:15Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 30 · green card filings: 7","filings_12m":30,"filings_prev_12m":31,"green_card_filings_12m":7,"median_offered_wage_usd":133986,"route":null,"cap_exempt":false,"checked_at":"2026-10-29T16:27:21+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":1}],"liveness":{"score":60,"band":"ok","label":"Likely open","p_open":1,"p_active":0.602,"p_room":1,"age_days":0,"expected_fill_days":38,"reasons":["conf:4","stale_co","win:early","comp:brand"],"computed_at":"2026-11-06T05:58:05Z"},"pay":null,"html_url":"https://alion.io/job/hologic-lead-incident-response-analyst","json_url":"https://alion.io/job/hologic-lead-incident-response-analyst.json","meta":{"generated_at":"2026-11-06T11:03:38Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":20028,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-07T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":720267},"rest":"https://alion.io/mcp/rest/get_company?id=720267"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fhologic-lead-incident-response-analyst"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fhologic-lead-incident-response-analyst"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fhologic-lead-incident-response-analyst"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/hologic-lead-incident-response-analyst\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fhologic-lead-incident-response-analyst"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3832742}},{"tool":"search_jobs","arguments":{"company":"hologic.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3832742},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}