1,422 incident response engineer jobs at 904 companies in United States
3mo
Save
Mark Applied
Hide
Incident Response Engineer
Arlington, Virginia, United States
$86k-$176k/yr OnsiteFull Time
4+ YOE4 years in security incident response or digital forensics; DoD 8140 compliance; bachelor’s degree or equivalent experience; active TS/SCI clearance.
SIEM, Digital forensics tools, Malware analysis tools, Incident response tools
2mo
Save
Mark Applied
Hide
SOC / Incident Response Engineer
Virginia, United States
OnsiteFull Time
Experience in security monitoring, incident response, threat detection, playbook/SOP development, tool integration, cloud and on-premises environments; principal-level applicants only.
Web Application Firewall (WAF)
1w
Save
Mark Applied
Hide
Senior Incident Response Engineer
Chicago, Illinois, United States
$123k-$175k/yr RemoteFull Time
7+ YOERequires 7+ years of cybersecurity experience focused on incident response, threat hunting, and forensics; advanced security certification; leadership experience; and a bachelor's degree or equivalent experience.
SIEM, EDR, IDS/IPS, Python, PowerShell, EnCE, GCFA
1mo
Save
Mark Applied
Hide
IT - Incident Response Engineer (69842)
United States
$113k-$165k/yr RemoteFull Time
7+ YOEBachelor's degree and 7+ years in security operations/incident response/cloud security; U.S. person required; authorized to work in US without sponsorship; strong communication and forensic, detection engineering, and cloud skills.
Python, PowerShell, SOAR, SIEM, Microsoft Azure, AWS, Google Cloud, MITRE ATT&CK
5d
Save
Mark Applied
Hide
Incident Response Security Engineer
United States
OnsiteFull Time
Experienced security practitioner with incident detection and response, cloud infrastructure security, threat modeling, development and automation experience; Golang or Python preferred.
AWS, GCP, Azure, Golang, Python
5d
Save
Mark Applied
Hide
Incident Response Security Engineer
United States or San Francisco or New York City
$169k-$225k/yr RemoteFull Time
Security practitioner with incident detection and response, product security or red teaming, cloud infrastructure security, automation, and development experience; knowledge of AWS, GCP, or Azure required.
AWS, GCP, Azure, Golang, Python
2w
Save
Mark Applied
Hide
Security Incident Response Engineer
Atlanta or Grand Rapids
OnsiteFull Time
3+ YOEBachelor's degree or equivalent experience; 3+ years in information security; incident response, threat hunting, digital forensics, SIEM/EDR, cloud security, MITRE ATT&CK, and scripting experience.
EDR, SIEM, Microsoft Defender for Endpoint, SentinelOne, CrowdStrike, Microsoft Sentinel, Google SecOps, Splunk, QRadar, Microsoft 365, Microsoft Entra ID, Active Directory, MITRE ATT&CK, Windows, Linux, macOS, PowerShell, Python, KQL, SOAR, EAP, Calm app, HSA, FSA
1w
Save
Mark Applied
Hide
Security Incident Response Engineer
United States
RemoteFull Time
3+ YOERequires 3+ years analyzing security data or building behavioral models, a computer science degree or equivalent, expert Python and SQL, and experience with log analysis, network security, forensics, and incident response.
Python, SQL, Databricks, Jupyter, Trino, PySpark, Pandas, Sci-kit Learn, osquery, Splunk, LogScale
3mo
Save
Mark Applied
Hide
Partner 20, Senior Incident Response Engineer
San Francisco, California, United States
$243k-$284k/yr HybridFull Time
5+ YOE5+ years incident response across AWS and GCP; lead live incidents; write detections; Python scripting; SIEM/detection frameworks; AI/SOC workflows.
Sigma, KQL, SIEM, EDR, SOAR, Python, MITRE ATT&CK, AI agents
1mo
Save
Mark Applied
Hide
Senior Incident Response/Operations Engineer
Bala Cynwyd, Pennsylvania, United States
$119k-$165k/yr OnsiteFull Time
8+ YOE8+ years in operational cybersecurity with 3+ years incident response, threat hunting, system administration (Windows or Linux), scripting (Python/Perl/Ruby), WEF/syslog and strong communication skills.
PowerShell, bash, Python, Perl, Ruby, Windows Event Forwarding (WEF), syslog, Ollama
2mo
Save
Mark Applied
Hide
Staff Cyber Incident Response Engineer
San Jose or Seattle or Lehi
$168k-$310k/yr OnsiteFull Time
7+ YOE7+ years incident response experience; host/network forensics, Windows analysis, EDR and SIEM expertise; cloud (AWS/Azure/GCP), container (Kubernetes, Docker) experience; bash and interpreted language (Python/Ruby); leadership and on-call participation.
Kubernetes, Docker, EDR, AWS, Azure, GCP, SIEM, bash, Python, Ruby
1w
Save
Mark Applied
Hide
Senior Manager, Incident Response
Atlanta, Georgia, United States
HybridFull Time
10+ YOERequires a bachelor's degree and 10+ years in cybersecurity, including 6+ years in incident response or security operations, SOC leadership, incident command, forensics, SIEM/SOAR engineering, and cross-functional response.
SIEM, SOAR, XSOAR, Python, PowerShell, Azure, Microsoft 365
2w
Save
Mark Applied
Hide
Senior/Lead Cyber Security - Incident Response Engineer
United States
$137k-$215k/yr RemoteFull Time
Enterprise incident response experience, tabletop exercise facilitation, cross-functional communication, digital forensics, AWS cloud security, AI security, and one listed security certification required.
Magnet Axiom, Velociraptor, Volatility, FTK, Autopsy, AWS, PICERL, NIST, SIEM, CSPM, AI
2w
Save
Mark Applied
Hide
Threat and Incident Response Engineer
Seattle or Washington
$120k-$139k/yr OnsiteFull Time
5+ YOEBachelor's degree in computer science, information security, information systems, or related field; 5+ years cybersecurity operations experience, including OT incident response and threat hunting; background check required.
Microsoft Sentinel, Splunk, QRadar, Microsoft Defender for Endpoint, CrowdStrike, SentinelOne, Dragos, Claroty, Nozomi Networks, MITRE ATT&CK, MITRE ATT&CK for ICS, Modbus, DNP3, OPC, BACnet, Sentinel Automation Rules, Splunk SOAR, Cortex XSOAR, NIST Cybersecurity Framework, NIST SP 800-82, IEC 62443, KQL, SPL, Python, PowerShell
6d
Save
Mark Applied
Hide
Senior Associate , Incident Response
United States
$100k-$150k/yr RemoteFull Time
3+ YOEThree years of incident response experience, preferably in consulting, with expertise in cyber defense, computer forensics, malware reverse engineering, network security, audits, project management, and client communication.
CREST IR, CFCE, ENCE, GIAC, GCFA, GCIH, GREM, GNFA
4d
Save
Mark Applied
Hide
Regional SOC (Security Operations Center) Incident Response Engineer
Newport News or Saline
$96k-$124k/yr OnsiteFull Time
4+ YOEBachelor's degree in cybersecurity, computer science, information technology, or related field plus 4 years of relevant IT experience, or equivalent credentials and 8 years. Requires security tooling, incident response, scripting, and communication skills.
firewalls, IDS/IPS, SIEM, EDR, vulnerability scanners, NIST, ISO
1mo
Save
Mark Applied
Hide
Senior Security Engineer – Cyber Hunting & Incident Response
Atlanta or Zebulon
OnsiteFull Time
7+ YOE7+ years security engineering experience, bachelor\u0002s degree or equivalent, deep expertise in threat hunting, incident response, digital forensics, and security engineering.
Wireshark, tcpdump, Microsoft Azure, Amazon Web Services (AWS)
1mo
Save
Mark Applied
Hide
Microsoft Security Automation & Incident Response Engineer - Contract Position
United States
HybridContract
5+ YOE5+ years in security operations/detection engineering/incident response. Strong Microsoft Sentinel and Defender experience, advanced KQL, Logic Apps, SOAR and SIEM engineering, detection engineering and workflow optimization.
Microsoft Sentinel, Defender XDR, Microsoft Defender for Endpoint, Microsoft Defender for Identity, Microsoft Defender for Cloud Apps, Entra ID, Zscaler, Logic Apps, KQL, SOAR, SIEM
3w
Save
Mark Applied
Hide
IT/OT Security Engineer & Incident Response Manager
New York City, New York, United States
RemoteFull Time
Hands-on OT and industrial security expertise, incident response leadership, endpoint and vulnerability management, cloud and identity security, and communication across technical, plant, and executive audiences.
CrowdStrike Falcon, Microsoft 365, Microsoft Entra ID, Conditional Access, MFA, VPN, PLC, HMI, SCADA, ISA/IEC 62443, NIST CSF, EDR
2mo
Save
Mark Applied
Hide
IT Incident Response and Forensics Consultant III
Greensboro, North Carolina, United States
OnsiteFull Time
3+ YOEBachelor's degree (or equivalent experience) and 3+ years IT experience with at least 1 year in information security or network engineering; incident triage, investigation, analysis, communication, and on-call incident response experience.
Explore Jobs