Incident Response Analyst II

Job title: Incident Response Analyst II

About the Role The Incident Response Analyst II is responsible for the full lifecycle of incident management—from detection through resolution and root cause analysis (RCA). The role includes acting as incident commander during major incidents, maintaining SLAs, documenting actions, and delivering insights to support continuous improvement across teams and systems.

What You'll Do

• Investigate, report, and respond to alerts, incident response (war room, remote bridges).
• Respond to incidents and critical situations in a calm, problem-solving manner, and conduct in-depth investigation of alerts.
• Be the first line of defense using monitoring and automation tools to conduct investigation, classification, and triage, all within prescribed SLAs.
• Provide deep understanding and intelligence of incident criticality and impact to resolver groups.
• Ensure detailed records of alarm handling activities, including actions taken and resolutions in ticketing tools; file incident reports.
• Act as incident commander during major incidents.
• Understand internal/external communication methods and stakeholder responsibilities.
• Support program managers and facilitate project deliverables, improving operational and engineering initiatives.
• Conduct root cause analysis (RCA) to determine recurring problems.
• Use in-depth questioning and analysis to determine the underlying cause of incidents or problems (Who, What, Where, When, Why).
• Perform duties in compliance with SOPs, MOPs, Runbooks, and Playbooks.

Server, DCIM, Network and Traffic Alarms Operations

• Continuously monitor alarm dashboards and systems.
• Investigate and respond to alarms related to Network and Server Health.
• Identify and acknowledge incidents associated with alarms.
• Assess incidents to determine their criticality and operational impact.
• Engage resolver groups and escalate to higher tiers or management following established paths.
• Maintain communication with teams, stakeholders, and incident responders.
• Follow documented procedures to resolve incidents promptly and effectively.
• Ensure accurate records of alarm handling and resolution activities in ticketing tools.
• Comply with SOPs, MOPs, Runbooks, and Playbooks.

Threat Intelligence, Critical Event Management

• Analysts monitor global threat feeds and operational alerts to protect ByteDance personnel and assets.
• Responsibilities include triaging alerts related to weather, security, travel, and regional instability, then coordinating appropriate response actions, escalating as needed.