2mo
Save
Mark Applied
Hide
Incident Response Engineer
Arlington, Virginia, United States
$117k-$234k/yr OnsiteFull Time
8+ YOE8+ years in security incident response or digital forensics; DoD 8140 required; Bachelor’s degree or equivalent experience.
SIEM, Digital Forensics, Malware Analysis, Incident Response Tools
2w
Save
Mark Applied
Hide
SOC / Incident Response Engineer
Virginia, United States
OnsiteFull Time
Experience in security monitoring, incident response, threat detection, playbook/SOP development, tool integration, cloud and on-premises environments; principal-level applicants only.
Web Application Firewall (WAF)
3mo
Save
Mark Applied
Hide
Incident Response Security Engineer
Singapore or United States
RemoteFull Time
Experience in product security, incident detection/response, cloud providers (AWS/GCP/Azure), and automation; Golang/Python development.
Golang, Python, AWS, GCP, Azure, Security Logging
3w
Save
Mark Applied
Hide
IT - Incident Response Engineer (67420)
Beachwood, Ohio, United States
$113k-$165k/yr OnsiteFull Time
7+ YOEBachelor's degree, minimum 7 years in security operations/incident response/cloud security or related field; hands-on IR, cloud security, detection engineering, SIEM, SOAR, Python/PowerShell, digital forensics; must be a U.S. person and reside within 50 miles of Beachwood, OH; authorized to work without sponsorship.
Microsoft Azure, AWS, Google Cloud, SIEM, SOAR, Python, PowerShell, MITRE ATT&CK, eDiscovery, AI/LLM
2mo
Save
Mark Applied
Hide
Cybersecurity Incident Response Engineer, Mid
Remote, Remote, United States
RemoteFull Time
4+ YOE4–7 years in cybersecurity operations and incident response; bachelor’s degree or equivalent; experience with SIEM/IDS/IPS/EDR; strong incident response and communication skills.
SIEM, IDS/IPS, EDR, Automation, Playbooks
1mo
Save
Mark Applied
Hide
Partner 20, Senior Incident Response Engineer
San Francisco, California, United States
$243k-$284k/yr HybridFull Time
5+ YOE5+ years incident response across AWS and GCP; lead live incidents; write detections; Python scripting; SIEM/detection frameworks; AI/SOC workflows.
Sigma, KQL, SIEM, EDR, SOAR, Python, MITRE ATT&CK, AI agents
3w
Save
Mark Applied
Hide
Security Incident Response Engineer
Grand Rapids or Atlanta
OnsiteFull Time
3+ YOE3+ years info security experience with 1-3 years incident response; proficiency with EDR platforms, digital forensics, threat hunting, PowerShell/Python/Bash scripting, Windows/macOS/Linux, and strong communication skills.
EDR, SentinelOne, Microsoft Defender, CrowdStrike, SIEM, MDR, PowerShell, Python, Bash, Microsoft M365, Entra ID, Microsoft Defender for M365, Active Directory, Windows, macOS, Linux
2w
Save
Mark Applied
Hide
Security Engineer - Operations / Incident Response
United States
RemoteFull Time
3+ YOE3+ years in security operations, detection engineering, or incident response; hands-on SIEM and EDR experience; SOAR/automation and scripting (Python); cloud security telemetry experience (AWS/GCP/Azure); strong incident leadership and communication skills.
SIEM, Splunk, Panther, Elastic, Sentinel, Chronicle, EDR, CrowdStrike, SentinelOne, Defender, Email security, SOAR, Python, Git, AWS, GCP, Azure, LLM
1mo
Save
Mark Applied
Hide
Staff Cyber Incident Response Engineer
San Jose or Seattle or Lehi
$168k-$310k/yr OnsiteFull Time
7+ YOE7+ years incident response experience; host/network forensics, Windows analysis, EDR and SIEM expertise; cloud (AWS/Azure/GCP), container (Kubernetes, Docker) experience; bash and interpreted language (Python/Ruby); leadership and on-call participation.
Kubernetes, Docker, EDR, AWS, Azure, GCP, SIEM, bash, Python, Ruby
1mo
Save
Mark Applied
Hide
Security Response Engineer, Incident Response
United States or United Kingdom or Singapore
$154k-$360k/yr RemoteFull Time
Proven incident response leadership, triage and remediation across endpoint/cloud/network, macOS endpoint experience, detections development (Sigma), and coding/scripting experience in Python, Go, or Rust.
macOS, Sigma, Python, Go, Rust
2mo
Save
Mark Applied
Hide
Lead Engineer - Incident Response Engineering
Brooklyn Park, Minnesota, United States
$132k-$238k/yr HybridFull Time
5+ YOEBachelor's degree or equivalent; 5+ years software development experience; expertise with JavaScript/TypeScript, React, Python, REST APIs; experience with SOAR, UEBA, and detection tooling preferred.
JavaScript, TypeScript, React, Python, REST APIs, SOAR, UEBA, PostgreSQL, Active Directory, LDAP, RBAC
4w
Save
Mark Applied
Hide
Sys/Cloud Admin/Incident Response Engineer
Millersville, Maryland, United States
RemoteFull Time
3+ YOE3+ years systems administration or cloud/SRE/incident response experience; bachelor’s in IT/CS/Engineering/Cybersecurity preferred; hands-on Windows/Linux and cloud experience; monitoring/observability and incident management skills; eligible for Public Trust clearance.
AWS, Microsoft Azure, Kubernetes, Splunk, Dynatrace, CloudWatch, Microsoft Azure Monitor, Grafana, PowerShell, Python, Bash
2mo
Save
Mark Applied
Hide
Incident Response Manager - Product & Engineering
San Francisco or New York City or Seattle
$290k-$365k/yr OnsiteFull Time
5+ YOE5+ years incident management; built/shaped incident response programs; cross-functional collaboration; cloud infra experience; data-driven; strong communication.
Incident response tooling, Monitoring, Logging, Cloud platforms
3d
Save
Mark Applied
Hide
Microsoft Security Automation & Incident Response Engineer - Contract Position
United States
HybridContract
5+ YOE5+ years in security operations/detection engineering/incident response. Strong Microsoft Sentinel and Defender experience, advanced KQL, Logic Apps, SOAR and SIEM engineering, detection engineering and workflow optimization.
Microsoft Sentinel, Defender XDR, Microsoft Defender for Endpoint, Microsoft Defender for Identity, Microsoft Defender for Cloud Apps, Entra ID, Zscaler, Logic Apps, KQL, SOAR, SIEM
4w
Save
Mark Applied
Hide
Cybersecurity Operations & Incident Response Lead
United States
$141k-$170k/yr RemoteFull Time
8+ YOE3+ Mgmt8+ years in security operations/IR, 3+ years team lead experience, hands-on SIEM/SOAR/EDR expertise, vulnerability management, incident command, detection engineering, familiarity with Azure/Entra/Okta/M365, and scripting (Python/TypeScript).
SIEM, SOAR, EDR, Active Directory Domain Services, Entra ID, Okta, Azure, Zscaler, Microsoft 365, KQL, Sigma, MITRE ATT&CK, Python, TypeScript
1mo
Save
Mark Applied
Hide
IT Incident Response and Forensics Consultant III
Greensboro, North Carolina, United States
OnsiteFull Time
3+ YOEBachelor's degree (or equivalent experience) and 3+ years IT experience with at least 1 year in information security or network engineering; incident triage, investigation, analysis, communication, and on-call incident response experience.
2mo
Save
Mark Applied
Hide
Cyber Security Incident Response Analyst II
San Francisco or Scottsdale or Chicago or New York
$130k-$162k/yr HybridFull Time
4+ YOE4+ years in information security; BS or 2-year degree in CS/Engineering/Math/Physical Science; experience with incident response and malware analysis.
SOAR, IDS/IPS, Firewalls, Malware analysis tools
4w
Save
Mark Applied
Hide
Sr. Security Engineer, Incident Response
Austin or Palo Alto
OnsiteFull Time
5+ YOE5+ years in incident response/SOC/security engineering, proven incident containment leadership, familiarity with MITRE ATT&CK, CrowdStrike/Falcon and SIEM, experience with Tines and Cyberhaven DLP, on-call participation.
Tines, CrowdStrike Falcon, CrowdStrike EDR, SIEM, SOAR, Cyberhaven DLP, MITRE ATT&CK
2mo
Save
Mark Applied
Hide
Sr. Staff Engineer (Product Security Incident Response)
Santa Clara, California, United States
$152k-$245k/yr OnsiteFull Time
4+ YOELead complex vulnerability investigations; advise remediation; collaborate with cross-functional teams.
1mo
Save
Mark Applied
Hide
Senior Manager, Cybersecurity Incident Response & Security Operations
Northbrook or United States
$142k-$213k/yr HybridFull Time
10+ YOEBachelor's degree or equivalent, 10+ years in cybersecurity with SOC/incident response leadership, SIEM and detection engineering expertise, experience with Microsoft 365 GCC High, familiarity with NIST frameworks, and relevant certifications preferred.
SIEM, Microsoft 365 GCC High (GCCH), NIST CSF, NIST 800-53, NIST 800-171
Explore Jobs