OpenLoop is the white label telehealth platform trusted by 400+ virtual care brands. Clinicians, pharmacy, diagnostics, AI — all under your brand. Backed by Techstars.
About the role
OpenLoop’s mission is to bring care anywhere by powering telehealth solutions at scale. Our Security Operations team protects the clinical and operational systems that OpenLoop and our partners run patient care on. As a Senior Incident Response Analyst, you’ll be a dedicated responder on our DFIR function — owning incidents end to end, deepening our forensic capability, and making sure containment happens fast when PHI and clinical operations are on the line.
What they're looking for
- 6–8 years of hands-on security experience, with the majority in incident response and/or digital forensics
- Demonstrated ownership of the full incident lifecycle, from detection validation through post-incident review
- Digital forensics breadth across host/disk, memory, network, cloud, and identity — from real casework, not coursework
- Working depth in EDR/EPP: investigating from endpoint telemetry, running response actions, and tuning what the tool surfaces
- Working depth in SIEM: query authoring, correlation logic, and timeline reconstruction from log data
- Hands-on fluency with a forensic toolchain (e.g., Velociraptor, KAPE, Volatility, Autopsy/EnCase/FTK/X-Ways, plaso, Zeek, Wireshark)
More about this role
OpenLoop was co-founded by CEO, Dr. Jon Lensing, and COO, Christian Williams, with the vision to bring care anywhere. Our telehealth support solutions are thoughtfully designed to streamline and simplify go-to-market care delivery for companies offering meaningful virtual support to patients across an expansive array of specialties, in all 50 states.
OpenLoop’s mission is to bring care anywhere by powering telehealth solutions at scale. Our Security Operations team protects the clinical and operational systems that OpenLoop and our partners run patient care on. As a Senior Incident Response Analyst, you’ll be a dedicated responder on our DFIR function — owning incidents end to end, deepening our forensic capability, and making sure containment happens fast when PHI and clinical operations are on the line.
Own tier-1 and tier-2 incidents end to end: detection validation, triage, scoping, containment, eradication, recovery, and post-incident review.
Run host, memory, network, cloud, and identity forensic investigations independently, with evidence handling that holds up to legal, regulatory, and client scrutiny.
Investigate from EDR and SIEM telemetry — write and refine queries,...
Browse similar: AI jobs · AI startup jobs · Startup jobs · Remote jobs