{"id":939590,"url":"https://alion.io/job/match-group-security-incident-response-analyst","title":"Security Incident Response Analyst","company":{"id":4277,"name":"Match Group","domain":"mtch.com","url":"https://alion.io/company/match-group","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Lever","truth_index":{"grade":"B","score":72,"open_postings":11,"ghost_share":0,"stale_share":0.909,"repost_share":0,"time_to_fill_p50_days":62,"computed_at":"2026-11-08T05:47:12Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Vancouver, Canada"],"countries":["CA"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":110000,"max":130000,"currency":"CAD","period":"year","gross":null,"usd_annual":92574},"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"DNS","optional":false},{"name":"GCP","optional":false},{"name":"IAM","optional":false},{"name":"SIEM","optional":false},{"name":"GDPR","optional":true},{"name":"Python","optional":true}],"status":"live","first_seen_at":"2026-04-13T19:55:54Z","employer_posted_date":"2026-04-13","last_verified_at":"2026-11-08T14:46:42Z","board_verified":true,"closed_at":null,"days_open":208,"trust":{"level":"stale","repost_count":0,"flags":["stale"],"days_open":208},"description":"About the Team\nThe MG Security Engineering organization provides unified security services across all Match Group brands. The Monitoring, Incident Response & SOC team is responsible for real-time threat detection, investigation, and response across the full portfolio - operating 24/7 to ensure security alerts are effectively triaged and responded to, minimizing the impact of potential threats.\nAbout the Role\nWe're looking for a senior individual contributor to join our Detection & Response team as a Security Incident Response Analyst. In this role, you'll serve as a senior-level investigator responsible for detecting, analyzing, and responding to advanced security threats across on-prem and cloud infrastructure in a multi-vendor environment. You'll lead investigations spanning phishing, malware, insider threats, and other complex security incidents - driving them from initial detection through containment,eradication, and recovery.\nWhat You'll Do\nLead end-to-end investigations into phishing, malware, insider threats, and other advanced security incidents\nTriage and analyze security alerts, distinguishing true threats from noise, and prioritize response based on risk and business impact.\nPerform technical malware analysis, including static and dynamic examination of suspicious files, to determine behavior, capability, and intent.\nConduct host and network-based analysis - analyzing system logs, processes, registry/configuration artifacts, memory, traffic patterns, DNS activity, and connection logs - to reconstruct attacker activity and identify persistence, command-and-control, lateral movement, and data exfiltration.\nInvestigate cloud-native incidents by analyzing audit logs, IAM and access activity, and network flow data to detect unauthorized access, privilege misuse, and malicious file activities across cloud environments.\nDrive incidents through containment, eradication, and recovery, coordinating with cross-functional teams as needed.\nDevelop and refine detection logic, playbooks, and response procedures to improve the team's ability to identify and act on emerging threats.\nAct as an escalation point for the most technically complex cases, mentoring junior analysts.\nDocument findings and communicate clearly with both technical and non-technical stakeholders, including post-incident reports and executive summaries.\nWhat We're Looking For\n5+ years of experience in Incident Response, DFIR, or Security Operations\n\nExperience leading significant security investigations\n\nStrong familiarity with cloud environments (AWS and/or GCP)\n\nHands-on experience with SIEM, EDR, and log analysis\n\nSolid understanding of identity systems and distributed architectures\n\nAbility to stay composed and structured during high-pressure situations\n\nClear written and verbal communication skills\n\nNice to Have\nExperience in large-scale consumer or SaaS environments\n\nExperience working across global teams\n\nFamiliarity with privacy-related incident handling (e.g., GDPR)\n\nScripting or automation experience (Python, etc.)\n\nWhy This Role Matters\nWe operate global consumer platforms that handle sensitive user data. When incidents happen, the way we respond matters.\n\nThis role plays a key part in containing impact, protecting user trust, and improving our overall response maturity.","description_format":"text","description_chars":3306,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"Canada","iso":"CA","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Incident Response","Dating & Relationships"],"lifecycle":[{"event":"open","at":"2026-09-15T16:37:14Z"}],"visa":[],"liveness":{"score":12,"band":"cold","label":"Long shot","p_open":1,"p_active":0.439,"p_room":0.28,"age_days":208,"expected_fill_days":62,"reasons":["conf:3","stale_co","velocity","win:tail","crowd:"],"computed_at":"2026-11-08T05:47:12Z"},"pay":{"stated_usd_annual":92574,"is_top_pay":false},"html_url":"https://alion.io/job/match-group-security-incident-response-analyst","json_url":"https://alion.io/job/match-group-security-incident-response-analyst.json","meta":{"generated_at":"2026-11-08T17:31:08Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":36835,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-09T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":4277},"rest":"https://alion.io/mcp/rest/get_company?id=4277"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fmatch-group-security-incident-response-analyst"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fmatch-group-security-incident-response-analyst"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fmatch-group-security-incident-response-analyst"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/match-group-security-incident-response-analyst\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fmatch-group-security-incident-response-analyst"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":939590}},{"tool":"search_jobs","arguments":{"company":"mtch.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":939590},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}