Source Job

US

  • Lead 24x7x365 incident coordination for escalated cyber threats, ensuring situational awareness and timely resolution.
  • Direct advanced incident response, including containment, remediation, recovery, and stakeholder communication.
  • Use Splunk SIEM, Microsoft Defender, and Cortex XSOAR to analyze security events and drive investigations.

Splunk SIEM Incident Response Digital Forensics

20 jobs similar to Incident Commander (Tier 3)

Jobs ranked by similarity.

US

  • Manage escalated security alerts and coordinate incident response activities in a 24x7x365 SOC environment.
  • Lead investigations, track event lifecycles, and drive remediation and recovery actions with federal stakeholders.
  • Ensure accurate documentation and compliance with SOPs while supporting Tier 1 and Tier 3 analysts.

Valiant Solutions is a security-focused IT solutions provider serving public clients nationwide. Named one of the Best Places to Work in the Washington DC area for 12 consecutive years, it fosters an employee-centric culture and provides great benefits and career development opportunities.

US

  • Manage daily incident response and forensic analysis of compromised systems.
  • Formulate and direct incident response efforts, prioritizing actions and creating detailed reports.
  • Build incident response plans, playbooks, and attack simulations for tabletop exercises.

Check Point protects over 100,000 organizations worldwide from cyber and AI-driven threats with a prevention-first approach. The company is recognized for workplace culture by TIME, Newsweek, and Forbes.

US 5w PTO

  • Lead SNHU's Security Operations Center as the senior escalation point and Incident Coordinator.
  • Develop SIEM alerts, reports, and dashboards; manage security tools like Splunk and Defender XDR.
  • Drive vulnerability management and communicate risks to stakeholders across the organization.

We are a private, nonprofit university dedicated to transforming lives through education since 1932. We serve over 180,000 learners worldwide with a people-centered strategy and a culture of innovation and inclusion.

Sweden

  • Identify and respond to security incidents on a global scale.
  • Act as incident commander to drive incidents through the entire response lifecycle.
  • Design and maintain security alerts, automated actions, playbooks and escalation workflows.

Mozilla Corporation is a non-profit-backed technology company that makes pioneering brands like Firefox and focuses on AI, social media, security, and more. With over 225 million monthly users, Mozilla is wholly owned by the Mozilla Foundation and strives to reclaim an internet built for people.

$175,000–$190,000/yr
US

  • Lead high-profile incident response engagements as the primary handler and coordinator.
  • Perform triage, forensic artifact analysis, and large-scale investigations across endpoints and networks.
  • Mentor junior responders and communicate clearly with customers throughout the incident lifecycle.

Cyderes builds practical identity and access management, exposure management, and risk programs, helping organizations stop active threats fast with managed detection and response. A Great Place to Work-Certified global team, they are driven by experienced operators and augmented by AI to deliver trusted security solutions.

$105,000–$105,000/yr
US

  • Act as the primary escalation point and technical lead for complex incidents.
  • Enhance monitoring by tuning alerts, refining detection logic, and automating workflows.
  • Mentor junior engineers and document incident response procedures.

DYOPATH is a managed security services provider that helps organizations defend against evolving cyber threats through security operations and monitoring. The company fosters an award-winning culture guided by its L.O.V.E. philosophy, emphasizing teamwork, respect, and professional growth.

$70,000–$80,000/yr
US 3w PTO

  • Lead analysis, containment, and remediation of complex security threats across a multi-tenant client base.
  • Serve as the primary escalation point for Tier I analysts and own critical incidents.
  • Mentor junior staff and drive improvements to playbooks, workflows, and DFIR capabilities.

Sentinel Blue is a young company bringing enterprise-class cybersecurity to small and medium-sized businesses. The environment is fast-paced and dynamic, with a focus on continuous learning and innovation.

$80,000–$90,000/yr
US 3w PTO

  • Perform security monitoring, digital forensics, and incident response across corporate, product, and mission environments.
  • Conduct threat hunting and apply cyber threat intelligence to secure the enterprise and improve detection capabilities.
  • Support vulnerability management, compliance assessments, and documentation of security procedures.

BlackSky is a real-time intelligence company that owns and operates a space-based intelligence platform, providing satellite imagery, automated analytics, and high-frequency monitoring. Its global team works with cutting-edge technology and is people-first, customer-focused, and fun.

Colombia

  • Safeguard customer digital assets, sensitive data, and critical systems against cyber threats as part of the MXDR team.
  • Leverage expertise in vulnerability identification, robust security implementation, and incident response to enhance security posture.
  • Collaborate with cross-functional teams to assess risks, formulate security strategies, and ensure adherence to industry standards.

Check Point Software Technologies is a leading vendor of cybersecurity solutions, protecting against sophisticated threats and attacks. The company has been honored by Time Magazine as one of the World’s Best Companies for 2024 and recognized as one of the World’s Top Female-Friendly Places to Work.

Poland

  • Lead investigation and resolution of complex cybersecurity incidents in the Security Operations Centre.
  • Analyze and correlate security events from SIEM, IDS, EDR, and other sources.
  • Conduct digital forensic investigations and provide expert guidance throughout the incident response lifecycle.

Eurofins Scientific is an international life sciences company providing analytical testing services to make life and the environment safer, healthier, and more sustainable. With over 65,000 employees across 950+ laboratories in 60 countries, they are a global leader in testing and laboratory services.

Netherlands

  • Monitor security events and provide technical analysis on alerts
  • Lead information security incidents and employee insider investigations by developing the incident response strategy and executing through closure
  • Deliver security guidance clearly and concisely for incident response and insider threat initiatives

Samsara (NYSE: IOT) is the pioneer of the Connected Operations Cloud, helping organizations reliant on physical operations harness IoT data for actionable insights. As a recently public company, it offers autonomy and support to make an impact, with a culture focused on building for the long term.

$208,500–$235,750/yr
US

  • Lead enterprise-scale security operations, including 24/7 SOC oversight, real-time detection, and automation.
  • Direct incident response, forensics, and risk-reduction programs across cloud and hybrid infrastructure.
  • Architect SIEM, SOAR, and AI/ML platforms; build and mentor high-performing cybersecurity teams.

U.S. FinTech operates the world's largest mortgage securitization platform, supporting the Uniform Mortgage-Backed Security of Fannie Mae and Freddie Mac. The company fosters a culture of innovation and flexibility, serving 70% of mortgage-backed securities in the market.

$105,000–$115,000/yr
US

  • Implement and configure security applications and infrastructure to support corporate policies and federal and state regulations.
  • Serve as an information security subject matter expert, including familiarity with cloud implementations.
  • Lead infrastructure security assessments and incident response efforts across networking, servers, databases, and applications.

KnitWell Group is a specialty retail operating company comprising iconic American brands such as Ann Taylor, Chico's, LOFT, and Talbots. Our associates are innovators who thrive through collaboration and are dedicated to excellence, creating fashion that makes customers feel good.

$129,600–$129,600/yr
Germany

  • Lead OT incident response engagements for industrial customers, including investigations, threat hunts, and compromise assessments.
  • Serve as Incident Commander during active incidents, delivering decision-grade guidance and managing response communications.
  • Deliver advisory services like IR planning workshops and maturity assessments, while mentoring teammates and improving methodologies.

Dragos is a global leader in OT cybersecurity, protecting critical infrastructure through technology, threat intelligence, and expert services. The company is a remote-first, mission-driven team across North America, Europe, the Middle East, and APAC.

UK 5w PTO

  • Monitor networks, servers, and devices for suspicious activity and respond to priority alerts within SLAs.
  • Analyze threats, conduct incident investigations, and develop automated playbooks for handling threats outside business hours.
  • Collaborate with the InfoSec team and other departments to ensure network security and contribute to documentation and policy review.

NEC Software Solutions is part of global tech giant NEC Corporation, providing software that helps dispatch ambulances, support families, and keep trains moving. With over 3,000 employees, they work with governments, hospitals, and police forces to push technological boundaries.

$108,000–$138,000/yr
US

  • Own the firewall estate and define security architecture standards across a multi-site broadband environment.
  • Lead major security initiatives, serve as technical incident commander, and drive automation.
  • Mentor Tier I/II engineers and manage the security posture roadmap aligned with NIST CSF.

They operate a multi-site broadband environment across six properties. The culture emphasizes security engineering, compliance, and technical leadership.

$90,000–$100,000/yr
US

  • Monitor, triage, and respond to security alerts and incidents across the security stack.
  • Engineer, implement, and maintain information security technologies such as SIEM, detection rules, and automation.
  • Collaborate with teams to promote information security culture and advise on cyber risk across the organization.

VEIC is a sustainable energy organization working toward a healthy planet, thriving people, and energy justice. The company values an inclusive culture and supports flexible work arrangements, welcoming candidates of all backgrounds.

$4,000–$5,333/mo
Europe

  • Investigate and respond to security alerts and incidents.
  • Operate SIEM, endpoint protection, and threat detection tools.
  • Support vulnerability management and security assessments.

LEONI is a global leading provider of products, solutions and services for energy and data management in the automotive industry. With about 95,000 employees in 23 countries and part of Luxshare Group, we shape the future of mobility.

$115,000–$130,000/yr
US

  • Coordinate and manage Major Incident process activities, including Sev1 and Sev2 incidents.
  • Communicate with internal and customer stakeholders on status, resolution, and success criteria.
  • Partner with Problem Management on RCA process and create Technical Action Plans.

HealthEdge offers AI-powered operational infrastructure for health insurance companies, helping them modernize operations and compete effectively. The company is experiencing strong market momentum and is investing in its people as it expands.

US

  • Lead and continuously improve the security posture, including operations, engineering, incident response, vulnerability management, and GRC.
  • Drive strategic security roadmaps and champion automation and AI adoption across security operations.
  • Develop and lead the security team while fostering a security-first culture and operational excellence.

WFAA is a private nonprofit that inspires gifts and connections between alumni and the University of Wisconsin-Madison. It values diversity and fosters an inclusive, respectful environment where staff and constituents thrive.