Source Job

20 jobs similar to Incident Response Team Leader

Jobs ranked by similarity.

Global

  • Handle complex security incidents, leading deep investigations and driving remediation actions.
  • Participate in a 24/7 on-call rotation to ensure timely response to critical security incidents.
  • Mentor L1/L2 analysts and drive improvements in detection capabilities and incident readiness.

Eurofins is an international life sciences company providing analytical testing services to ensure products are safe and authentic. With over 65,000 staff across 950+ laboratories in 59 countries, it offers a multicultural and entrepreneurial work environment.

India

  • Lead daily MDR operations and guide security investigations.
  • Coach and mentor security analysts to improve performance.
  • Collaborate with engineering teams to enhance detection capabilities.

This company provides advanced Managed Detection and Response (MDR) services to protect organizations worldwide. It fosters a collaborative, inclusive culture with remote-first work and continuous learning opportunities.

$71,640–$124,176/yr
US 4w PTO

  • Perform in-depth analysis, triage, and response to security threats following documented policies and playbooks.
  • Monitor and analyze security events using SIEM, EDR, and assess risk levels of cyber threats.
  • Escalate higher-risk events and collaborate with incident response teams to drive incident handling.

Experian is a global data and technology company that powers opportunities for people and businesses by redefining lending, preventing fraud, and creating digital solutions. With 23,300 employees across 32 countries, the company emphasizes inclusion, work-life balance, and has been recognized as a World's Best Workplace in 2024.

Germany 4w PTO

  • Lead and oversee security operations, including SOC activities, detection engineering, incident response, and exposure management.
  • Build, mentor, and develop the Cyber Defense team through hiring, coaching, and talent retention.
  • Continuously improve detection capabilities and response procedures using threat intelligence and lessons learned.

Jobgether is an AI-powered job matching platform that connects candidates with hiring companies. It processes applications and shares shortlists with employers for final decisions.

UK

  • Lead and support the response to all security events and incidents across Twilio's global infrastructure, services, and applications.
  • Work cross-collaboratively to solve challenges related to a broad spectrum of threat actors and improve security posture.
  • Own the security incident lifecycle, participate in on-call rotation, and conduct post-incident betterments.

Twilio shapes the future of communications with innovative solutions for hundreds of thousands of businesses, empowering millions of developers worldwide. The company embraces a remote-first work culture and a strong culture of connection and global inclusion, fostering a vibrant and diverse team.

$135,481–$182,160/yr
US

  • Monitor security events and provide technical analysis on alerts.
  • Lead information security incidents and employee investigations, developing response strategies.
  • Deliver security guidance and coordinate building services to support security operations.

Samsara is the pioneer of the Connected Operations Cloud, helping organizations that depend on physical operations harness IoT data to improve safety, efficiency, and sustainability. As a recently public company with a culture that encourages rapid career development, they support a flexible, employee-led remote model.

US Unlimited PTO 12w maternity 12w paternity

  • Monitor logs, alerts, and telemetry to detect threats across infrastructure and cloud environments.
  • Perform in-depth security analysis and investigations to assess risk and identify root causes.
  • Coordinate and execute incident response efforts including containment, mitigation, and recovery.

Binance.US is a licensed and regulated U.S. crypto platform providing secure access to over 190 cryptocurrencies. As a remote-first team, we innovate to bridge traditional finance and Web3, helping bring financial freedom within reach for all.

Europe

  • Respond to security incidents as part of a distributed 24x7 on-call schedule, triaging and containing events.
  • Conduct security investigations and forensics across data sources to determine event timelines and impact.
  • Build automations leveraging AI and agentic platforms to expedite incident response and scale team impact.

Databricks is the data and AI company, providing a unified platform for data, analytics, and AI. More than 10,000 organizations worldwide, including over 50% of the Fortune 500, rely on Databricks, which fosters a diverse and inclusive culture.

United States Unlimited PTO

  • Lead the Security Detection & Response team, owning incident response, detection engineering, and automation.
  • Oversee security observability, detection strategy, and AI-assisted workflows to improve speed and reliability.
  • Build and retain a high-performing remote team, collaborating across Engineering, IT, and other departments.

Apollo.io is a leading go-to-market platform for revenue teams, trusted by over 500,000 companies. The company is one of the fastest-growing SaaS firms, raising ~$250 million and valued at $1.6 billion, backed by top-tier investors like Sequoia Capital and Bain Capital Ventures.

UK 4w PTO

  • Lead security strategy and develop scalable practices to protect systems, products, and customers.
  • Partner with engineering teams to improve resilience, reduce risk, and embed security into development.
  • Manage security incidents, evaluate emerging technologies, and build a high-performing security team.

The company is a fast-growing technology firm focused on innovation and engineering excellence. It operates with a distributed international team and emphasizes trust, autonomy, and ownership.

Global

  • Own, administer, and optimize SIEM and EDR platforms, including detection content and automation workflows.
  • Design SOAR playbooks and integrations across security tools to streamline triage, enrichment, and containment.
  • Investigate security events, conduct threat hunts, and support incident response alongside CSIRT Analysts.

Vultr provides high-performance cloud infrastructure for enterprises and AI innovators worldwide, with 33 global data centers. As the world's largest privately-held cloud infrastructure company, Vultr has grown significantly and values inclusion, offering comprehensive benefits and professional development.

$156,000–$168,000/yr
US

  • Coordinate and manage escalated incident processes, ensuring timely restoration of failed services.
  • Communicate incident status, resolution, and success criteria to internal and customer stakeholders.
  • Own Root Cause Analysis (RCA) processes and manage Technical Action Plans for Sev1 and Sev2 incidents.

HealthEdge is a healthcare software company providing hosted solutions for the healthcare industry. The company operates in a full-time, remote environment with a focus on collaborative and cross-functional teamwork.

Canada United States

  • Execute the security architecture process for business initiatives, from engagement through to implementation.
  • Support the Information Security Architect across analysis, reviews, and outputs as needed.
  • Act as a point of contact for InfoSec queries and use security tooling to identify and analyze risks.

StackAdapt is a leading technology company that provides an AI-powered marketing platform for programmatic advertising. The company has a diverse, remote-first culture with a supportive workplace.

$170,000–$170,000/yr
US

  • Oversee global 24/7 SOC operations monitoring ~3 million endpoints, including incident response and performance metrics.
  • Recruit, mentor, and train SOC analysts, develop career paths, and deliver ongoing training.
  • Identify and implement automation opportunities to reduce manual workload and improve efficiency.

Kaseya is the leading provider of AI-powered IT management and cybersecurity software, serving Managed Service Providers and internal IT organizations worldwide. Backed by Insight Partners, Kaseya supports customers in over 20 countries and manages over 15 million endpoints; the culture is centered around innovation, accountability, and results.

$100,000–$165,000/yr
US Unlimited PTO

  • Lead security operations including vulnerability management, incident response, and SIEM platform maturity.
  • Administer Microsoft security tools (Defender, Purview, Entra) and support compliance frameworks like SOC 2 and HITRUST.
  • Drive risk reduction through security awareness, risky user remediation, and cross-functional collaboration.

Sequel develops next-generation drug-delivery advancements, starting with the twiist Automated Insulin Delivery System for diabetes management. It is headquartered in New Hampshire and fosters a culture of hard work, fun, and support.

$113,800–$139,000/yr
US

  • Protect on-premise and cloud infrastructure, detect and respond to advanced threats, and improve security posture through risk analysis and vulnerability management.
  • Manage and optimize security tools like SIEM, EDR, and IDS/IPS, and perform proactive threat hunting to anticipate new attack techniques.
  • Assess security controls for compliance, analyze threat trends, and participate in infrastructure initiatives to adhere to industry best practices.

Clear Capital is a national real estate analytics, data solutions, and valuation technology company. Since 2001, the company has focused on building confidence in real estate decisions, with a team that values integrity, kindness, and attention to detail.

$54,400–$120,750/yr
US

  • Investigate security alerts using tools such as CrowdStrike Falcon Suite and Microsoft Sentinel to determine scope and impact.
  • Support incident response activities, including containment, remediation, and post-incident documentation.
  • Collaborate with cross-functional teams to improve detection quality, workflows, and response readiness.

Commvault is the gold standard in cyber resilience, empowering customers to uncover, take action, and rapidly recover from cyberattacks. For over 25 years, more than 100,000 organizations and a vast partner ecosystem have relied on Commvault to reduce risks and improve governance.

$77,000–$82,000/yr
US

  • Monitor security alerts and assist in triaging suspicious activity using SIEM tools.
  • Collaborate with senior analysts to investigate potential threats and support incident response efforts.
  • Participate in threat hunting and vulnerability review exercises to identify and mitigate risks.

HealthEdge provides software solutions for the healthcare industry. They have a Center of Excellence structure with experienced security professionals, fostering a collaborative and growth-oriented culture.

$80,900–$137,600/yr

  • Monitors, investigates, and responds to cybersecurity events and alerts across various security platforms.
  • Manages data loss prevention and insider risk alerts, collaborating with IT and business stakeholders.
  • Supports continuous improvement of detection capabilities through alert tuning and process optimization.

USAP is a company that safeguards organizational data and technology assets through cybersecurity operations. The size and culture are not specified, but the job emphasizes collaboration, continuous improvement, and a secure technology environment.

Netherlands

  • Lead end-to-end management of major production incidents, coordinating cross-functional teams from detection to resolution.
  • Drive improvements in operational reliability by reducing MTTD, MTTR, and optimizing on-call programs.
  • Facilitate blameless postmortems and establish incident management standards including severity frameworks and runbooks.

Jobgether is an AI-powered job matching platform that connects candidates with hiring companies. They focus on innovation and operational excellence within a globally distributed engineering organization.