Incident Responder Jobs

New

Security Incident Responder

Snowbit is looking for an experienced Security Incident Responder to join our Ma...

Location

India , Gurugram

Salary:

Not provided

Coralogix

Expiration Date

Until further notice

Requirements

3-5 years in incident response, threat hunting with strong experience in cloud security (AWS, Azure, GCP) and Kubernetes environments
Proven Incident response experience in complex environments
Demonstrates strong expertise in understanding adversary tactics and techniques, translating them into actionable investigation tasks, conducting in-depth analysis, and accurately assessing the impact
Familiarity with attack vectors, malware families, and campaigns
Deep understanding of network architecture, protocols, and operating system internals (Windows, Linux, Unix)
Expertise in Kubernetes security, including container orchestration, workload isolation, and cluster hardening
Experience securing Kubernetes infrastructure, runtime security, and security monitoring
Ability to work independently and collaboratively in dynamic, fast-paced environments
Excellent written and verbal communication skills to interact with technical and non-technical stakeholders

Job Responsibility

Leverage Snowbit’s advanced MDR platform to lead large-scale incident response investigations and proactive threat-hunting initiatives
Conduct log analysis, and cloud artifact reviews using EDR and similar tools depending on availability, to support incident resolution and root-cause investigations
Investigate and respond to security incidents in containerized environments, with a specific focus on Kubernetes security and architecture
Research evolving cyberattack tactics, techniques, and procedures (TTPs) to strengthen customer defenses and codify insights for our services
Provide technical and executive briefings to customers, including recommendations to mitigate risk and enhance cybersecurity posture
Collaborate with internal teams, including engineering and research, to enhance Snowbit’s MDR and incident response capabilities
Partner with customer teams (IT, DevOps, and Security) to ensure seamless integration and adoption of Snowbit’s MDR services
Share expertise through presentations, research publications, and participation in the global cybersecurity community

Fulltime

M365 Incident Responder

Citi's Security Operations Center (SOC) Cloud Incident Response Team seeks a hig...

Location

United States , Irving; Tampa

Salary:

125760.00 - 188640.00 USD / Year

Citi

Expiration Date

December 31, 2025

Requirements

Consistently demonstrates clear and concise written and verbal communication
Proven influencing and relationship management skills
Strong understanding of security incident response processes
Excellent technical documentation skills
Proven analytical skills
Knowledge of the tools and processes to provide operational security support to the Microsoft 365 (M365) ecosystem
Advanced proficiency with Microsoft 365 services and their security configurations
Hands-on experience with M365 including configuration, analysis and pivoting through large data sets and security best practices
Experience with Identity and Access Management and M365 services - OneDrive, Teams, SharePoint, Exchange Online, etc.
Proficient with Azure/M365 tenant capabilities and roles that support incident response/forensic analysis

Job Responsibility

Act as a subject matter expert on incident response for Entra ID and M365 set of services
Collaborate across teams to develop capabilities that support incident response and forensic analysis of M365 incidents
Designing, implementing, and participating in the incident response processes specific to Entra ID and M365 deployments
Develop, document and maintain operationally effective playbooks to deal with cloud based incidents
Collaborate with global multidisciplinary groups for triaging and defining the scope of large scale incidents
Document and present investigative findings for high profile events and other incidents of interest
Participate in readiness exercises such as purple team, table tops, etc.
Train junior colleagues on relevant best practices
Mitigate risk by analyzing the root cause of issues, impacts to business, and required corrective actions and develop security solutions
Provide Information Security advice and counsel as needed

What we offer

Medical, dental & vision coverage
401(k)
Life, accident, and disability insurance
Wellness programs
Paid time off packages including vacation, sick leave, and paid holidays
Discretionary and formulaic incentive and retention awards

Fulltime

New

Customer Support Incident Responder

As an Incident Responder at Mercury, you’ll sit at the center of our most critic...

Location

United States , San Francisco; New York; Portland

Salary:

87700.00 - 109600.00 USD / Year

Mercury

Expiration Date

Until further notice

Requirements

4+ years in a Customer Support or comparable customer-facing role required
Experience with CRM systems, such as Salesforce or comparable platforms required
familiarity with Zendesk is preferred
Calm Under Pressure
Passionate About Customer Experience
Collaborative Cross-Functional Partner
Data-Informed & Operationally Minded
Solutions-Oriented Owner
Bold & Winsome
Phenomenal Written & Verbal Communicator

Job Responsibility

Incident Detection & Triage: Monitor and assess alerts, support channels, and triage reports to identify emerging issues
Partner with the Customer Support On-Call team and Engineering teams to confirm incidents and determine severity
Maintain deep product knowledge to quickly recognize when something is truly off and bring the right people together to resolve it
Customer Support Leadership During Incidents: Act as the Customer Support DRI (Directly Responsible Individual) during high-severity incidents
Lead real-time coordination of the customer support response during incidents: creating bridges, facilitating alignment, and ensuring customer experience is prioritized
Draft, review, and publish internal and external communications that balance clarity, accuracy, and empathy
Provide real-time updates and guidance to agents managing inbound customer contacts
Ensure Zendesk macros, internal pages, and status updates reflect current information
Communication & Customer Advocacy: Represent the voice of the customer in incident command meetings
Translate technical updates into plain-language messages for customers and customer support teams

What we offer

base salary
equity (stock options)
benefits

Fulltime

Security Operation Engineer

The Security Operation Engineer is responsible for ensuring the security and int...

Location

Malaysia , Kuala Lumpur

Salary:

Not provided

Allianz

Expiration Date

Until further notice

Requirements

Bachelor’s degree in computer science, information technology, cybersecurity, or a related field
Proven experience in information security, network security, or a related role
Strong understanding of security principles, practices, and technologies
Experience with security monitoring and incident response tools and technologies
Proficiency in scripting or programming languages (e.g., Python, PowerShell) for automation tasks
Familiarity with cloud security and security frameworks (e.g., NIST, ISO 27001)
Strong analytical and problem-solving skills
Excellent communication and interpersonal skills
Ability to work independently and as part of a team
Certifications in security or related areas (e.g., Certified Information Systems Security Professional - CISSP, Certified Ethical Hacker - CEH) are a plus

Job Responsibility

Monitor security systems and alerts to detect and respond to potential security incidents and threats
Investigate and respond to security incidents, conducting root cause analysis and implementing corrective actions
Conduct regular vulnerability assessments and penetration tests to identify and remediate security weaknesses
Deploy, configure, and maintain security tools and technologies, such as firewalls, intrusion detection/prevention systems, endpoint security, and SIEM solutions
Assist in the development and enforcement of security policies, procedures, and standards to ensure compliance with industry regulations and best practices
Maintain accurate documentation of security incidents, processes, and configurations
Work closely with IT, network, and application teams to ensure security is integrated into all aspects of the organization's technology environment
Stay up-to-date with emerging security threats and trends, and recommend enhancements to improve the organization's security posture
Completing projects on various issues when needed.

What we offer

Diverse and inclusive workforce
Equal opportunity employer
Support for employees and their ambitions.

Fulltime

Security Operation Engineer

The Security Operation Engineer is responsible for ensuring the security and int...

Location

Malaysia , Kuala Lumpur

Salary:

Not provided

Allianz

Expiration Date

Until further notice

Requirements

Bachelor’s degree in computer science, information technology, cybersecurity, or a related field
Proven experience in information security, network security, or a related role
Strong understanding of security principles, practices, and technologies
Experience with security monitoring and incident response tools and technologies
Proficiency in scripting or programming languages (e.g., Python, PowerShell) for automation tasks
Familiarity with cloud security and security frameworks (e.g., NIST, ISO 27001)
Strong analytical and problem-solving skills
Excellent communication and interpersonal skills
Ability to work independently and as part of a team
Certifications in security or related areas (e.g., Certified Information Systems Security Professional - CISSP, Certified Ethical Hacker - CEH) are a plus

Job Responsibility

Monitor security systems and alerts to detect and respond to potential security incidents and threats
Investigate and respond to security incidents, conducting root cause analysis and implementing corrective actions
Conduct regular vulnerability assessments and penetration tests to identify and remediate security weaknesses
Deploy, configure, and maintain security tools and technologies, such as firewalls, intrusion detection/prevention systems, endpoint security and SIEM solutions
Assist in the development and enforcement of security policies, procedures, and standards to ensure compliance with industry regulations and best practices
Maintain accurate documentation of security incidents, processes, and configurations
Work closely with IT, network, and application teams to ensure security is integrated into all aspects of the organization's technology environment
Stay up-to-date with emerging security threats and trends, and recommend enhancements to improve the organization's security posture
Any other duties when deemed necessary
Completing projects on various issues when needed

Fulltime

Security Operation Engineer

The Security Operation Engineer is responsible for ensuring the security and int...

Location

Malaysia , Kuala Lumpur

Salary:

Not provided

Allianz

Expiration Date

Until further notice

Requirements

Bachelor’s degree in computer science, information technology, cybersecurity, or a related field
Proven experience in information security, network security, or a related role
Strong understanding of security principles, practices, and technologies
Experience with security monitoring and incident response tools and technologies
Proficiency in scripting or programming languages (e.g., Python, PowerShell) for automation tasks
Familiarity with cloud security and security frameworks (e.g., NIST, ISO 27001)
Strong analytical and problem-solving skills
Excellent communication and interpersonal skills
Ability to work independently and as part of a team
Certifications in security or related areas (e.g., Certified Information Systems Security Professional - CISSP, Certified Ethical Hacker - CEH) are a plus

Job Responsibility

Monitor security systems and alerts to detect and respond to potential security incidents and threats
Investigate and respond to security incidents, conducting root cause analysis and implementing corrective actions
Conduct regular vulnerability assessments and penetration tests to identify and remediate security weaknesses
Deploy, configure, and maintain security tools and technologies, such as firewalls, intrusion detection/prevention systems, endpoint security and SIEM solutions
Assist in the development and enforcement of security policies, procedures, and standards to ensure compliance with industry regulations and best practices
Maintain accurate documentation of security incidents, processes, and configurations
Work closely with IT, network, and application teams to ensure security is integrated into all aspects of the organization's technology environment
Stay up-to-date with emerging security threats and trends, and recommend enhancements to improve the organization's security posture
Any other duties when deemed necessary
Completing projects on various issues when needed

Fulltime

Splunk Administrator

Sopra Steria seeks a Splunk Administrator to monitor infrastructure, respond to ...

Location

India , Bengaluru

Salary:

Not provided

Sopra Steria

Expiration Date

Until further notice

Requirements

Monitor Splunk infrastructure, logs & dashboards for anomalies
Respond to alerts & incidents as part of business support
Perform initial triage, escalate to L3 when required
Work on incident resolution within defined SLA’s
Document the RCA for major incidents
Ensure high availability & reliability of Splunk environments (indexers, SHs, forwarders, etc.)
Perform routine health checks & system audits
Handle Splunk configuration changes (inputs.conf, outputs.conf, props.conf, etc.)
Manage users' access & roles
Identifying & resolving performance bottlenecks in indexing & searching

Job Responsibility

Monitor Splunk infrastructure
Respond to alerts & incidents
Perform initial triage
Work on incident resolution within SLA’s
Document RCA for major incidents
Ensure high availability of environments
Perform health checks & audits
Handle configuration changes
Manage user access & roles
Resolve performance bottlenecks

What we offer

Inclusive and respectful work environment
Open to people with disabilities

Fulltime

Security Intelligence Analyst

Atlassian is hiring a Security Intelligence Analyst to join its team. The role i...

Location

United States , Austin

Salary:

128300.00 - 172500.00 USD / Year

Atlassian

Expiration Date

Until further notice

Requirements

Bachelor's degree in Computer Science, Information Security, or a related field
3 years relevant experience working in security using at least one scripting language (i.e. Python, Pearl, Ruby, Bash), writing code to complete security tasks
Must pass technical interview.

Job Responsibility

Build and run new monitoring/analytics systems
Watch over corporate environment and Atlassian cloud services, hunting for signs of compromise and implementing high-fidelity alerts
Build a new system, develop automation, and solve security problems
Respond to incidents, writing code in Python
Research attacker tools and tactics
Conduct in-depth research on attacker tools and tactics to provide valuable insights to enhance overall security measures
Safeguard digital infrastructure by responding to major incidents
Ensure confidentiality, integrity, and availability of sensitive information
Configure and monitor security controls for JIRA, Confluence, and Bitbucket
Analyze security alerts, network traffic, and logs to understand and respond to incidents

What we offer

Health and wellbeing resources
Paid volunteer days
Other perks as outlined on go.atlassian.com/perksandbenefits.

Fulltime

Incident Responder

Wiz

Location:
Israel, Tel Aviv

Category:
IT - Software Development

Contract Type:
Not provided

Salary:

Job Description:

Job Responsibility:

Requirements:

Additional Information:

Job Posted:
December 13, 2025

Looking for more opportunities? Search for other job offers that match your skills and interests.

Similar Jobs for Incident Responder

Security Incident Responder

M365 Incident Responder

Customer Support Incident Responder

Security Operation Engineer

Security Operation Engineer

Security Operation Engineer

Splunk Administrator

Security Intelligence Analyst

Incident Responder

Wiz

Location:Israel, Tel Aviv

Category:IT - Software Development

Contract Type:Not provided

Salary:

Job Description:

Job Responsibility:

Requirements:

Additional Information:

Job Posted:December 13, 2025

Looking for more opportunities? Search for other job offers that match your skills and interests.

Similar Jobs for Incident Responder

Security Incident Responder

M365 Incident Responder

Customer Support Incident Responder

Security Operation Engineer

Security Operation Engineer

Security Operation Engineer

Splunk Administrator

Security Intelligence Analyst

Location:
Israel, Tel Aviv

Category:
IT - Software Development

Contract Type:
Not provided

Job Posted:
December 13, 2025