Security Incident Response Analyst

Match Group is hiring a Security Incident Response Analyst in Vancouver, Canada. It pays CAD 110k-CAD 130k a year and Level rates it ; you can apply on Match Group.

Level's read on this job

Level rates this role Little AI ●○○○: aI is not part of the work.
Level classes it as a senior role.
Match Group has 70 other open roles on Level.

AI in this role

Know where you belong!

Match Group is a leading provider of dating products across the globe. Our portfolio includes Tinder, Hinge, Match, Meetic, PlentyOfFish, OkCupid, The League, HER, and others, each designed to spark meaningful connections for singles worldwide. Creating a sense of belonging doesn’t stop at our products - it’s the foundation of every team we hire. When it comes to dating, the connection starts online, but the real magic happens once you meet in real life (IRL). We think the same is true for creating the best platforms, so we work together IRL 3 days/week.

About the Team

The MG Security Engineering organization provides unified security services across all Match Group brands. The Monitoring, Incident Response & SOC team is responsible for real-time threat detection, investigation, and response across the full portfolio — operating 24/7 to ensure security alerts are effectively triaged and responded to, minimizing the impact of potential threats.

About the Role

We're looking for a senior individual contributor to join our Detection & Response team as a Security Incident Response Analyst. In this role, you'll serve as a senior-level investigator responsible for detecting, analyzing, and responding to advanced security threats across on-prem and cloud infrastructure in a multi-vendor environment. You'll lead investigations spanning phishing, malware, insider threats, and other complex security incidents — driving them from initial detection through containment, eradication, and recovery.

What You'll Do

Lead end-to-end investigations into phishing, malware, insider threats, and other advanced security incidents
Triage and analyze security alerts, distinguishing true threats from noise, and prioritize response based on risk and business impact.
Perform technical malware analysis, including static and dynamic examination of suspicious files, to determine behavior, capability, and intent.
Conduct host and network-based analysis — analyzing system logs, processes, registry/configuration artifacts, memory, traffic patterns, DNS activity, and connection logs — to reconstruct attacker activity and identify persistence, command-and-control, lateral movement, and data exfiltration.
Investigate cloud-native incidents by analyzing audit logs, IAM and access activity, and network flow data to detect unauthorized access, privilege misuse, and malicious file activities across cloud environments.
Drive incidents through containment, eradication, and recovery, coordinating with cross-functional teams as needed.
Develop and refine detection logic, playbooks, and response procedures to improve the team's ability to identify and act on emerging threats.
Act as an escalation point for the most technically complex cases, mentoring junior analysts.
Document findings and communicate clearly with both technical and non-technical stakeholders, including post-incident reports and executive summaries.

What We're Looking For

5+ years of experience in Incident Response, DFIR, or Security Operations
Experience leading significant security investigations
Strong familiarity with cloud environments (AWS and/or GCP)
Hands-on experience with SIEM, EDR, and log analysis
Solid understanding of identity systems and distributed architectures
Ability to stay composed and structured during high-pressure situations
Clear written and verbal communication skills

Nice to Have

Experience in large-scale consumer or SaaS environments
Experience working across global teams
Familiarity with privacy-related incident handling (e.g., GDPR)
Scripting or automation experience (Python, etc.)

Why This Role Matters

We operate global consumer platforms that handle sensitive user data. When incidents happen, the way we respond matters.
This role plays a key part in containing impact, protecting user trust, and improving our overall response maturity.

Why Match Group? Our mission is simple – to help people find love and happiness! We love our employees too and understand the importance of all life's milestones. Here are some of the benefits we are proud to offer:

Generous vacation, flex days, professional development days
RRSP matching, and employee stock purchase plan
Professional development budget and unlimited access to Udemy from day one
Match Group mentorship program
Parental leave top up and fertility preservation benefits
Extended health & dental benefits from day one
Corporate ClassPass membership and other wellness benefits

We are proud to be an equal opportunity employer and we value the rich dynamics that diversity brings to our company. We do not discriminate on the basis of race, religion, color, creed, national origin, ancestry, disability, marital status, age, sexual orientation, sex (including pregnancy and sexual harassment), gender identity or expression, uniformed service or veteran status, genetic information, or any other legally protected characteristic. Period. If you require a reasonable accommodation to participate in the hiring process — such as during pre-employment testing or interviews — please indicate this by selecting “Yes” in the accommodation request field. We’ll reach out to discuss your needs if you're selected for the interview stage. #MG

How we rate this

Security Incident Response Analyst at Match Group rates 37 out of 100 for how much of the daily work is AI. That makes it Little AI (AI Level 1 of 4). The level is about AI in the job, not seniority.

Classification

Little AI. AI is not part of the work.

●●●● Builds AI80 to 100
●●●○ Works on AI60 to 79
●●○○ Uses AI40 to 59
●○○○ Little AI0 to 39

Levels come from how often the tools, models and workflows of the role are named in the posting itself. Read the description and count the AI tools, models and workflows it names.