Security Incident Response Analyst - DART

Security Incident Response Analyst - DART

We’re looking for a curious and detail-oriented Incident Response, Senior Analyst to harness your expertise in data analytics, infrastructure, application security, and identity management. You'll analyze security alerts and respond to a wide range of incidents, including workforce security, where your efforts will be crucial in preserving the trust our merchants place in Shopify. As the incident commander, you'll own issues from start to finish, persistently bringing all the pieces together and leaving no stone unturned. This role has a significant investigative component, offering daily opportunities to apply your analytical skills and experience navigating vast amounts of data to find that needle in the haystack that will be the key to resolving the security issue, working in close partnership with our Legal team.

Key Responsibilities

• Analyze and respond to security alerts, focusing on workforce security to reduce risks.
• Serve as an Incident Commander, leading response efforts and collaborating across Shopify.
• Partner daily with Legal on sensitive investigations, evidence gathering, and mitigation strategies.
• Implement new alerts to enhance detection capabilities.
• Collaborate with security, engineering, HR, and Legal teams to remediate findings and address risks.
• Lead root cause analysis sessions to prevent recurrence of incidents.
• Participate in defining security table-top exercises focused on workforce security.
• Refine and build knowledge base documentation for clarity among technical and legal stakeholders.
• Identify trends in the security landscape and recommend improvements.

Qualifications

• Understanding of information security fundamentals, including threat models and detection techniques.

• Knowledge of security issues affecting web applications, infrastructure, and internal systems.

• Comfort with running and debugging scripts (e.g., Python, Ruby, bash) to automate work.

• Experience with logging and data analysis tools (e.g., SIEM, SOAR, SQL, Splunk, KQL).

• Familiarity with UEBA tools and IAM systems (e.g., Okta, Microsoft Entra).

• Knowledge of cloud environments and security logs (e.g., GCP, AWS, Azure).

• Excellent communication skills for distilling technical data into actionable intelligence.

• Experience in troubleshooting complex problems with minimal information.

• Proficiency in researching and using data analysis to identify security threats.

• Nice to Have

• Experience in digital forensics or workforce security investigations is a strong asset.

• Proficiency in generating code/scripts for automation

• Experience handling sensitive investigations such as employment or legal matters

• Eastern timezone preferred

• Comfort using AI/LLM tools for efficient task completion.

• Awareness of GitHub and continuous integration practices.

• About the discipline

• Support at Shopify

• Every discipline at Shopify works close to real merchant problems. You'll join a team that owns meaningful scope, ships to a high bar, and helps millions of entrepreneurs start, run, and scale their businesses.

• Growth and rewards

• Mastery-matched compensation.

• Mastery

• At Shopify, getting better at your craft and increasing your impact is how you grow. Twice a year, we assess both in our Mastery cycle, Shopify’s performance review. Achieving higher Mastery is a promotion, and when you earn a promotion your total rewards grow with it. Crafter and manager are equal paths, so you can pursue excellence in the craft you’re best at.

• Total Rewards

• With Flex Comp, your Rewards Wallet gives you agency over your compensation mix. Adjust your mix of cash, restricted share units, and stock options (including programs like Long-Term Equity) to where it makes sense for you, and mix it up anytime as life and priorities change. Buying a house? Want more skin in the game? Just experimenting? It’s your call.

• Flex Comp program offerings vary based on location, role, and employment type. Full details are set out in our Terms & Conditions and related plan documents.

• Built for real life

• Room for the rest of your life.

• Flexible work, remote by design

• A flexible vacation policy means most Shopifolk can take the vacation days they feel they need to recharge.

• If a change of everyday scenery is more your jam, Destination 90 means you can work from (almost) anywhere in the world for 90 days of the year.

• Your setup

• Your battlestation is your home base. Request the desk, chair, and AV gear you need to get shit done.

Benefits

• You need ‘em, we’ve got ‘em. Our health and welfare benefits may include health, dental, vision, disability, and life insurance depending on your country. If you’re in a country without a package, you'll receive a monthly allowance. We also offer mental health support for you and your dependents, including immediate and confidential services like counseling and coaching sessions.
• Family support
• We offer fertility benefits globally, along with paid parental leave to welcome a new family member.