203 incident response engineer jobs at 142 companies in Berkeley, CA

1mo
Save
Mark Applied
Hide
Partner 20, Senior Incident Response Engineer
San Francisco, California, United States
$243k-$284k/yr HybridFull Time
Andreessen Horowitz
Andreessen Horowitz: Provides venture capital and support to technology startups.
5+ YOE5+ years incident response across AWS and GCP; lead live incidents; write detections; Python scripting; SIEM/detection frameworks; AI/SOC workflows.
Sigma, KQL, SIEM, EDR, SOAR, Python, MITRE ATT&CK, AI agents
1mo
Save
Mark Applied
Hide
Staff Cyber Incident Response Engineer
San Jose or Seattle or Lehi
$168k-$310k/yr OnsiteFull Time
Adobe
AdobeNASDAQ: ADBE: Provides software for digital media creation and marketing analytics
7+ YOE7+ years incident response experience; host/network forensics, Windows analysis, EDR and SIEM expertise; cloud (AWS/Azure/GCP), container (Kubernetes, Docker) experience; bash and interpreted language (Python/Ruby); leadership and on-call participation.
Kubernetes, Docker, EDR, AWS, Azure, GCP, SIEM, bash, Python, Ruby
2mo
Save
Mark Applied
Hide
Incident Response Manager - Product & Engineering
San Francisco or New York City or Seattle
$290k-$365k/yr OnsiteFull Time
Anthropic
Anthropic: Developing safe and reliable artificial intelligence systems.
5+ YOE5+ years incident management; built/shaped incident response programs; cross-functional collaboration; cloud infra experience; data-driven; strong communication.
Incident response tooling, Monitoring, Logging, Cloud platforms
2mo
Save
Mark Applied
Hide
Cyber Security Incident Response Analyst II
San Francisco or Scottsdale or Chicago or New York
$130k-$162k/yr HybridFull Time
Early Warning Services
Early Warning Services: Operates payment and risk solutions for the financial industry.
4+ YOE4+ years in information security; BS or 2-year degree in CS/Engineering/Math/Physical Science; experience with incident response and malware analysis.
SOAR, IDS/IPS, Firewalls, Malware analysis tools
1mo
Save
Mark Applied
Hide
Sr. Security Engineer, Incident Response
Austin or Palo Alto
OnsiteFull Time
Navan
NavanNasdaq: NAVN: Integrated platform for corporate travel and expense management.
5+ YOE5+ years in incident response/SOC/security engineering, proven incident containment leadership, familiarity with MITRE ATT&CK, CrowdStrike/Falcon and SIEM, experience with Tines and Cyberhaven DLP, on-call participation.
Tines, CrowdStrike Falcon, CrowdStrike EDR, SIEM, SOAR, Cyberhaven DLP, MITRE ATT&CK
2mo
Save
Mark Applied
Hide
Sr. Staff Engineer (Product Security Incident Response)
Santa Clara, California, United States
$152k-$245k/yr OnsiteFull Time
Palo Alto Networks
Palo Alto NetworksNASDAQ: PANW: Provides enterprise-grade network, cloud, and endpoint security software.
4+ YOELead complex vulnerability investigations; advise remediation; collaborate with cross-functional teams.
2mo
Save
Mark Applied
Hide
Senior Detection and Response Engineer
Palo Alto or New York City or United States
$150k-$190k/yr HybridFull Time
Spotnana
Spotnana: Cloud-based travel-as-a-service platform for enterprises.
3+ YOE3+ years in detection engineering/SOC/incident response; detection-as-code, SIEM query authoring (ES|QL, KQL, SPL); EDR hunting; Python or Go proficiency; Git/CI-CD workflows; MITRE ATT&CK familiarity.
SIEM, EDR, ES|QL, KQL, SPL, Python, Go, Microsoft Defender for Endpoint, CrowdStrike, SentinelOne, AWS, Azure, GCP, CloudTrail, Azure Activity Logs, GCP Audit Logs, Elastic Security, Entra ID, Okta, SSO, OIDC, SOAR, MISP, OTX, abuse.ch, Cloudflare, Zscaler, Git, CI/CD
3mo
Save
Mark Applied
Hide
Detection & Response Security Engineer
San Francisco, California, United States
$188k-$282k/yr HybridFull Time
Harvey
Harvey: AI platform for legal research and document analysis.
4+ YOE4+ years in Security, Software Engineering, Site Reliability Engineering, or related disciplines; offensive security experience; incident response; strong networking, OS, and cryptographic knowledge.
ClickHouse
2d
Save
Mark Applied
Hide
Principal Detection and Response Engineer
San Mateo, California, United States
$295k-$345k/yr HybridFull Time
Roblox
RobloxNYSE: RBLX: Platform for creating and playing user-generated 3D digital experiences.
8+ YOE8+ years in detection/response, security data engineering, incident response; experience building streaming ETL pipelines; proficiency with SIEM/EDR/NDR/SOAR and languages like C, Golang, or Java.
Kafka, PubSub, Spark, Flink, Athena, BigQuery, C, Golang, Java, SIEM, EDR, NDR, SOAR
3mo
Save
Mark Applied
Hide
Security Engineer, Detection & Response
New York or San Francisco or Seattle or Washington
$238k-$297k/yr OnsiteFull Time
Scale AI
Scale AI: Provides data and infrastructure for training artificial intelligence models.
5+ YOE5+ years in detection engineering, incident response, or security operations; production-quality coding (Python or Go); SIEM/EDR/SOAR and cloud (AWS/GCP/Azure) experience; digital forensics and malware analysis; strong communication.
Python, Go, SIEM, EDR, SOAR, AWS, GCP, Azure
1w
Save
Mark Applied
Hide
Incident Operations Specialist
San Francisco, California, United States
$119k-$179k/yr RemoteFull Time
Zapier
Zapier: Connects web applications to automate repetitive workflows without coding.
Operate and maintain incident tooling, build AI-powered automations and workflows, troubleshoot integrations and dashboards, and enable incident response across the organization.
incident.io, PagerDuty, Slack, Databricks, Grafana, Looker, SQL, Datadog, Prometheus, Opensearch, Graylog, GitLab, Coda, Google Workspace, Jira, Zendesk, Cursor, Zapier AI, Claude
1mo
Save
Mark Applied
Hide
Senior Detection and Response Engineer
San Carlos, California, United States
$180k-$235k/yr OnsiteFull Time
1X
1X: Manufacturing safe, general-purpose humanoid robots for home and work.
5+ YOE5+ years in detection engineering/incident response; experience with SIEM, EDR, logging pipelines, cloud monitoring (AWS/GCP/Azure); strong scripting in Python/Go/Bash; Bachelor's in a technical field required.
SIEM, EDR, Python, Go, Bash, Kubernetes, MITRE ATT&CK, AWS, GCP, Azure
1mo
Save
Mark Applied
Hide
Security Engineer, Detection and Response
San Francisco, California, United States
$200k-$325k/yr OnsiteFull Time
Serval
Serval: AI platform for automating IT and enterprise service workflows.
10+ YOE10+ years in cybersecurity with deep expertise in detection engineering, incident response, security operations, observability, and team leadership; experience with SIEM/EDR/cloud telemetry and driving detection strategies.
SIEM, data lakes, EDR, observability stacks, cloud telemetry, logging
1w
Save
Mark Applied
Hide
Security Engineer, Detection Response
San Francisco or New York City or London or Berlin or Remote
$208k-$312k/yr HybridFull Time
Vercel
Vercel: Frontend cloud platform for building and hosting web applications.
Extensive security operations experience with SIEM, logging, detection engineering, incident response, AWS, GitHub, SQL, scripting (Python/Bash) and compiled languages (Rust/Go).
SIEM, AWS, GitHub, SQL, Python, Bash, Rust, Go, EDR
2w
Save
Mark Applied
Hide
Security Software Engineer II, Detection and Response
San Francisco or United States
$124k-$255k/yr RemoteFull Time
Pinterest
PinterestNYSE: PINS: Visual discovery engine for finding inspiration and creative ideas.
Experience in intrusion detection and incident response in cloud environments; SIEM query writing, telemetry analysis (EDR, osquery, firewall logs), scripting (Python/Go/Ruby), networking fundamentals, and OS internals (macOS/Linux/Windows).
SIEM, EDR, Osquery, Python, Go, Ruby, MacOS, Linux, Windows, TCP/IP
2mo
Save
Mark Applied
Hide
Security Engineer, Level 5, Detection & Response
Los Angeles or Palo Alto or Santa Monica
$178k-$313k/yr OnsiteFull Time
Snap
SnapNYSE: SNAP: Develops social media applications and augmented reality technology.
6+ YOE6+ years security experience; BS in CS/Engineering; strong Python/Go; OS/cloud proficiency; incident response and threat hunting.
Python, Go, Kubernetes, AWS, Google Cloud Platform, macOS, Windows, Linux
4w
Save
Mark Applied
Hide
Security Engineer II, Detection and Response
San Francisco or Vancouver or Phoenix or Los Angeles or Seattle or Austin or Portland or California or United States or Canada
$123k-$165k/yr RemoteFull Time
Circle
CircleNYSE: CRCL: Digital currency issuer and blockchain financial infrastructure provider.
2+ YOE2+ years in detection/response or security engineering; experience with incident response, AWS + EKS, AI tooling, MacOS internals, and programming in Python or Golang; familiarity with Slack and GSuite; able to take on-call shifts.
Slack, Apple MacOS, GSuite, SIEM, Orchestration platforms, AWS, EKS, AI tooling, Python, Golang
2mo
Save
Mark Applied
Hide
Security engineer, detection and response (US)
San Francisco, California, United States
$200k-$240k/yr HybridFull Time
Writer
Writer: Platform for building and deploying enterprise generative AI agents.
3+ YOE3-5+ years in security operations, detection engineering, or incident response; Python, SIEM experience; AI/ML security focus; on-call capability; cross-functional collaboration.
Python, KQL, SPL, SIEM
1mo
Save
Mark Applied
Hide
Security Engineer, Detection and Response
San Francisco or New York
$230k-$260k/yr OnsiteFull Time
Notion
Notion: Provides a unified workspace for notes, documents, and project management.
6+ YOE6+ years in detection engineering/security operations/incident response; built and operated production detections; fluent in detection languages (Sigma, KQL, SPL, YARA-L, EQL, Panther); cloud security (AWS/GCP/Azure); hands-on with SIEM, EDR, SOAR; on-call experience.
Sigma, KQL, SPL, YARA-L, EQL, Panther, AWS, GCP, Azure, SIEM, EDR, SOAR, LLM, Kubernetes
2mo
Save
Mark Applied
Hide
Security Engineer, Level 5, Detection & Response
Los Angeles or Palo Alto or Santa Monica
$178k-$313k/yr HybridFull Time
Snap
SnapNYSE: SNAP: Provides visual messaging software and augmented reality wearable devices.
6+ YOE6+ years in security fields; strong Python/Go; cloud and OS internals knowledge; threat hunting and incident response.
Python, Go, macOS, Windows, Linux, Kubernetes, AWS, Google Cloud Platform