Cybersecurity Incident Response Specialist

Who we are:

Geotab ® is a global leader in IoT and connected transportation and certified “Great Place to Work™.” We are a company of diverse and talented individuals who work together to help businesses grow and succeed, and increase the safety and sustainability of our communities.

Geotab is advancing security, connecting commercial vehicles to the internet and providing web-based analytics to help customers better manage their fleets. Geotab’s open platform and Geotab Marketplace ®, offering hundreds of third-party solution options, allows both small and large businesses to automate operations by integrating vehicle data with their other data assets. Processing billions of data points a day, Geotab leverages data analytics and machine learning to improve productivity, optimize fleets through the reduction of fuel consumption, enhance driver safety and achieve strong compliance to regulatory changes.

Our team is growing and we’re looking for people who follow their passion, think differently and want to make an impact. Ours is a fast paced, ever changing environment. Geotabbers accept that challenge and are willing to take on new tasks and activities - ones that may not always be described in the initial job description. Join us for a fulfilling career with opportunities to innovate, great benefits, and our fun and inclusive work culture. Reach your full potential with Geotab. To see what it’s like to be a Geotabber, check out our blog and follow us @InsideGeotab on Instagram .

Who you are:

We are always looking for amazing talent who can contribute to our growth and deliver results! Geotab is seeking a Cybersecurity Incident Response Specialist who will be responsible for protecting Geotab's software, hardware, and supply chain by leading incident response efforts across government-compliant and commercial environments. If you love investigative security work, thrive in fast-moving environments, and are keen to join an industry leader — we would love to hear from you!

What you'll do:

As a Cybersecurity Incident Response Specialist, your key area of responsibility will be owning incident response operations for Geotab's government compliance environments. You will proactively monitor, triage, and lead response efforts for security incidents, conduct log analysis across web applications, and leverage tools including Elastic and CrowdStrike. During lower-incident periods, you will lead threat hunts and strategic IR project work to continuously improve our security posture. You will participate in a on-call rotation with dedicated coverage for US-specific incidents.

To be successful in this role you will be a self-starter with strong investigative instincts who can execute independently with minimal supervision. In addition, the successful candidate will have excellent communication skills with the ability to coordinate across leadership and internal teams, and a demonstrated ability to push tasks to completion even in ambiguous or high-pressure situations.

How you'll make an impact:

Proactively monitor, evaluate, and track systems and networks for breaches to Geotab's security, products, and customers

Identify security flaws and vulnerabilities and utilize industry standard metrics for evaluating risks (e.g. CVSS)

Ensure that Geotab's compliance requirements are met (e.g. NIST 800-53 NIST 800-171), with dedicated focus on FedRAMP and CONUS environments

Perform security audits, risk analysis, network forensics, and penetration testing to reduce attack surface

Perform malware analysis and reverse engineering to develop a procedural set of responses to security problems

Establish plans that outlines security gap assessments, policies, procedures, playbooks, training, and tabletop testing

Establish protocols for effectively communicating security incidents and breaches with customers, internal stakeholders, and law enforcement

Remedy security breaches in a timely manner according to priority and provide expert SME guidance to internal teams

What you'll bring to the role:

Post-secondary diploma or degree specializing in Computer Science, Engineering, or a related field

3–5 years of experience in an Incident Response or Security Operations role

Hands-on experience with Elastic, CrowdStrike, and SQL; scripting proficiency in Python, PowerShell, and Bash; familiarity with Splunk, QRadar, or other SIEM tools is a strong asset

Experience in GCP environments (primary); AWS, Azure, or Oracle cloud familiarity is an asset

CCSP certification desired; CISSP and SANS certifications is a plus — strong hands-on experience will be considered over certifications alone

Strong communication skills with proven ability to work independently as a self-starter in a remote or hybrid environment (Atlanta or remote; hybrid if Atlanta-based)

Willingness to participate in a on-call incidents

To be eligible, candidates must have continuously resided in the continental United States for at least three years immed…