Source Job

US

  • Monitor security events and incidents to detect potential threats and vulnerabilities.
  • Support response to security incidents and manage the incident response process end-to-end.
  • Implement and monitor security measures to protect LTK’s infrastructure and assets.

Splunk Security SIEM

20 jobs similar to Security Engineer, Incidence Response

Jobs ranked by similarity.

$80,000–$100,000/yr
US Unlimited PTO

  • Deliver exceptional support experiences through security expertise and empathetic communication.
  • Provide expert-level advisory services on complex security questions and product issues.
  • Drive Security Operations team efficiency through process creation, optimization, and innovative feature ideas.

Blumira is a security operations platform built for growing teams and partners supporting them. They integrate comprehensive visibility, tools, and expert guidance to give IT and security teams peace of mind. The team is passionate about putting resilience in reach for every organization and helping teams build their own expertise.

$155,763–$219,901/yr
US

  • Collaborating with Security Operations Center (SOC) team members to monitor, detect, and respond to cybersecurity threats in a timely manner.
  • Responding to cybersecurity incidents from identification through resolution.
  • Developing and maintaining up-to-date knowledge of the threat landscape, as well as advancements in cybersecurity technologies and methodologies.

Calendly's product helps connect millions of people. They are in the midst of exciting product growth and offer opportunities to learn and grow alongside top professionals.

US Unlimited PTO

  • Architect, implement, and maintain SIEM solutions with a focus on modern platforms.
  • Design and manage log ingestion pipelines using tools such as Cribl Stream, Edge, or Search.
  • Develop custom parsers, dashboards, correlation rules, and alerting logic for security analytics and threat detection.

GuidePoint Security provides trusted cybersecurity expertise, solutions, and services that help organizations make better decisions and minimize risk. Since its inception in 2011, GuidePoint has grown to over 1000 employees and established strategic partnerships with leading security vendors.

$50,000–$60,000/yr
US 3w PTO

  • Monitor SIEM dashboard and security tools to detect security incidents.
  • Analyze alerts to determine relevance and prioritize response efforts.
  • Conduct investigations by gathering context and relevant logs.

Sentinel Blue is a young company focused on bringing enterprise-class cybersecurity to small and medium-sized businesses. They are pushing the envelope of how things are done and constantly seeking innovative ways to meet that mission in a fast-paced, dynamic environment that values learning and challenges.

US

  • Support and execute security incident response activities.
  • Operate and improve enterprise security controls and tooling.
  • Coordinate security investigations with DevOps, IT, and Engineering teams.

Keeper Security transforms cybersecurity for organizations around the world with next-generation privileged access management. Keeper’s zero-trust and zero-knowledge cybersecurity solutions are FedRAMP and GovRAMP Authorized, FIPS 140-2 validated, as well as SOC 2 and ISO 27001 certified.

$106,000–$134,000/yr
US

  • Hands on experience with implementing and administering SentinelOne.
  • Experience with AWS and Azure cloud platforms.
  • Document security processes, procedures, policies and standards

Signet Jewelers is the world's largest retailer of diamond jewelry. They operate more than 2,800 stores worldwide and are a people-first company valuing their team members and the communities they serve.

$128,000–$161,000/yr
US

  • Design, implement, and maintain advanced detection rules across SIEM, EDR, and Cloud platforms.
  • Develop complex automated response playbooks for multi-stage incidents and integrate security tools via APIs.
  • Co-lead the organization's threat hunting program, defining strategy, methodology, and campaign planning.

AlphaSense is a market intelligence and search platform powered by AI, helping companies make informed decisions with insights from various content sources. With over 2,000 employees globally and offices in multiple countries, they serve over 6,000 enterprise customers, including a majority of the S&P 500.

$195,000–$210,000/yr
US 12w maternity

  • Lead the identification, triage, and validation of security incidents, acting as the ultimate escalation point for the SOC.
  • Drive organizational incident readiness by designing and executing practical response exercises to ensure first responders are prepared at all levels.
  • Lead cross-functional Post-Incident Reviews to extract critical lessons; drive specific tooling and process enhancements that harden organizational defenses.

Huntress is a fully remote, global team of passionate experts and ethical badasses on a mission to break down the barriers to cybersecurity. Founded in 2015 by former NSA cyber operators, Huntress protects all businesses with enterprise-grade, fully owned, and managed cybersecurity products. They protect 4M+ endpoints and 7M+ identities worldwide, elevating underresourced IT teams with protection that works as hard as they do.

$130,000–$160,000/yr
US

  • Conducts threat monitoring and analysis using threat detection tools.
  • Builds and maintains security infrastructure and system performance.
  • Triages alerts from detection platforms, identifying false positives and escalating attacks.

Nuvalent is dedicated to creating selective medicines with expertise in chemistry, specifically designed to meet the needs of cancer patients. They are an early-stage company that brings together experienced scientists and industry veterans with a history in oncology drug development and company building.

$149,500–$169,202/yr
US

  • Design, build, and maintain security tools, scripts, and automations.
  • Partner with Engineering teams to manage and drive remediation of security vulnerabilities.
  • Evaluate and prioritize security risks based on industry standards and business context.

Weedmaps is a global leader in the cannabis industry. They are dedicated to transparency, education, and community, serving cannabis to consumers and businesses in the U.S. and worldwide.

Global

  • 24/7 monitoring and alert triage across SIEM/EDR/cloud security tooling; identify false positives vs. credible threats and set appropriate severity.
  • Initial investigation and enrichment: gather relevant logs/telemetry, add context, and document findings clearly in the case/ticketing system.
  • Escalation and coordination: escalate confirmed/suspected incidents quickly and cleanly to L2/IR with a complete handoff (timeline, scope, IOCs, actions taken).

Keyrock is a leading change-maker in the digital asset space, renowned for its partnerships and innovation. They have over 200 team members around the world with a diverse team from 42 nationalities and backgrounds ranging from DeFi natives to PhDs.

Mexico

  • Monitor active threats, analyze them, and develop a remediation plan.
  • Respond to all security incidents and manage the end-to-end incident response lifecycle.
  • Work cross-functionally with engineering teams to architect secure solutions.

EarnIn is a company building products that deliver real-time financial flexibility for those with the unique needs of living paycheck to paycheck. They are growing fast and excited to continue bringing world-class talent onboard to help shape the next chapter of their growth journey.

$85,000–$85,000/yr
US

  • Detect and respond to security threats across network, systems, and cloud environments.
  • Troubleshoot and resolve complex technical issues, performing root cause analysis.
  • Act as an escalation point for unresolved alerts/issues and mentor SNOC Engineer I team members.

DYOPATH is committed to providing excellent technology services. They value innovation, collaboration, and continuous skill-building in a supportive team environment.

Europe

  • Act as the technical Subject Matter Expert for enterprise cybersecurity log data management solutions.
  • Define and implement scalable, modular, secure, and maintainable solutions.
  • Create and maintain architecture artifacts describing system High-Level Design and Low-Level Design.

Jobgether uses an AI-powered matching process to ensure applications are reviewed quickly, objectively, and fairly against the role's core requirements. They identify the top-fitting candidates, and this shortlist is then shared directly with the hiring company.

New Zealand

  • Supporting investigations, day‑to‑day operations, and the uplift of our security posture.
  • Jumping into real incidents, guiding security decisions, and helping teams build securely from the start.
  • Unpicking a phishing campaign and advising on a new solution or progressing vulnerability management.

Contact Energy believes home is the most important place in the world. They're a team that’s reimagining how Aotearoa is powered and how customers experience energy. Contact is guided by their tikanga and they touch lives to make life better.

US

  • Own and drive remediation of security vulnerability tickets across environments
  • Analyze vulnerability trends to identify process gaps and recommend improvements
  • Track remediation progress and provide weekly status updates to management

ItD is a consulting and software development company blending diversity, innovation, and integrity with real business results. They are a woman- and minority-led firm that rejects strong hierarchies, empowering them to deliver great results with Fortune 500 companies and high-performance teams.

US

  • Manage Google SecOps/SIEM for threat detection, alerting, and investigation workflows.
  • Administer Thycotic/Delinea Secret Server for privileged credential management.
  • Maintain and configure Cyberhaven DLP for data loss prevention.

Redapt Inc. is a data center infrastructure integrator, technology engineering firm, and cloud services provider. They deliver innovative solutions and services that power our customers' most demanding applications and enable them to extract powerful insights from data.

New Zealand

  • Keeps the lights on, data safe, and people moving fast.
  • Jumping into real incidents, guiding security decisions, and helping teams build securely from the start.
  • Contributing to reviews of business solutions, risk identification and secure‑by‑design practices.

Contact Energy is a power, mobile, and broadband company that is transforming how Aotearoa is powered, leading the charge on renewable energy and digitising customer journeys. They are a team of 1000+ from all walks of life. They value caring for each other, learning from one another, and being guided by their tikanga.

Australia New Zealand

  • Acting as a senior escalation point and incident coordinator for security incidents across Canva’s cloud, endpoint, and SaaS environments.
  • Leading and actively participating in security incident response, from initial detection through investigation, containment, eradication, and recovery.
  • Performing deep forensic analysis to determine scope, impact, and root cause, and translating technical findings into clear outcomes for stakeholders.

Canva is a design platform. They have campuses in Sydney and Melbourne and co-working spaces in Brisbane, Perth and Adelaide.

$90,000–$140,000/yr
US

  • Identify and help mitigate security issues related to Applied’s cloud, datacenter, and Kubernetes infrastructure.
  • Implement new and update existing security measures for the protection of Applied’s infrastructure.
  • Contribute to the operationalization of Security platforms at Applied.

Applied Systems is transforming the insurance industry with innovative software and services. They have 40+ years of experience and are committed to creating a culture built on values that make them indispensable to each other.