Incident Response Consultant

You have a clear vision of where your career can go. And we have the leadership to help you get there. At CNA, we strive to create a culture in which people know they matter and are part of something important, ensuring the abilities of all employees are used to their fullest potential. 

The Senior Incident Response Analyst plays a critical role in the detection, investigation, and response to cybersecurity threats across the enterprise. This position supports the broader incident response program by conducting in-depth analysis of security events, coordinating response efforts, and contributing to the continuous improvement of detection and response capabilities. The role requires strong technical acumen, a proactive mindset, and the ability to communicate effectively with both technical and non-technical stakeholders.

JOB DESCRIPTION:

Essential Duties & Responsibilities

Performs a combination of duties in accordance with departmental guidelines:

• Monitor and analyze security alerts from Security Information and Event Management (SIEM) and other security tools to identify potential threats.
• Lead investigations into security incidents, including root cause analysis and remediation recommendations.
• Collaborate with IT, Legal, HR, and other stakeholders during incident response activities.
• Develop and maintain incident response playbooks and standard operating procedures.
• Conduct threat hunting activities using available tools and threat intelligence to identify undetected threats.
• Assist in the development and tuning of detection rules and use cases.
• Support post-incident reviews and contribute to lessons learned and process improvements.
• Stay current on emerging threats, vulnerabilities, and attack techniques.
• Provide mentorship and guidance to junior analysts and team members.
• Participate in red/blue team exercises and tabletop simulations.

Skills, Knowledge & Abilities

• Strong understanding of incident response lifecycle and cyber kill chain.
• Experience with SIEM platforms, endpoint detection and response (EDR), and forensic tools.
• Familiarity with threat intelligence platforms and open-source investigative tools.
• Ability to analyze malware behavior and identify indicators of compromise (IOCs).
• Strong communication skills with the ability to convey technical findings to non-technical audiences.
• Ability to work under pressure and manage multiple priorities in a fast-paced environment.
• Knowledge of regulatory requirements (e.g., SOX, HIPAA, GDPR) and security frameworks (e.g., NIST, MITRE ATT&CK).
• Preferred experience in the insurance or financial services industry.

Education & Experience

• Bachelor’s Degree in Computer Science, Information Security, or related field; or equivalent work experience.
• Typically 5–7 years of experience in cybersecurity, with at least 3 years focused on incident response or threat detection.
• Relevant certifications such as GCIH, GCFA, GCIA, or equivalent preferred.

In certain jurisdictions, CNA is legally required to include a reasonable estimate of the compensation for this role. In District of Columbia, California, Colorado, Connecticut, Illinois, Maryland, Massachusetts, New York and Washington, the national base pay range for this job level is $72,000 to $141,000 annually. Salary determinations are based on various factors, including but not limited to, relevant work experience, skills, certifications and location. CNA offers a comprehensive and competitive benefits package to help our employees – and their family members – achieve their physical, financial, emotional and social wellbeing goals.  For a detailed look at CNA’s benefits, please visit cnabenefits.com.

CNA is committed to providing reasonable accommodations to qualified individuals with disabilities in the recruitment process. To request an accommodation, please contact leaveadministration@cna.com.