incident responder

Verita AI

About Verita AIVerita AI builds high-trust data pipelines that enable AI systems to understand real-world workflows across specialized professional domains. We work with domain experts to teach models how complex technical work actually happens in practice, from routine security operations to high-stakes incident response and threat analysis.Brief DescriptionWe're hiring Cybersecurity specialists to help train and evaluate AI systems on real-world security workflows. You will translate deep security expertise into structured tasks and evaluate AI outputs for technical accuracy, risk awareness, practical applicability, and adherence to established security frameworks.What You'll Do<ul><li>Author high-quality, realistic cybersecurity tasks grounded in professional security operations, including threat detection, vulnerability analysis, incident triage, hardening, and policy review</li><li>Define evaluation criteria and expected outputs so AI-generated security work can be assessed for accuracy, completeness, and appropriate risk prioritization</li><li>Review and evaluate AI-generated security analysis and recommendations for technical correctness and real-world applicability</li><li>Provide detailed feedback to improve AI outputs across security reasoning, tool usage, and defensive strategy</li><li>Document security logic, threat rationale, and framework references clearly</li></ul>Domain Focus<ul><li>Vulnerability assessment and penetration testing</li><li>Incident detection, triage, and response</li><li>Security architecture review and hardening</li><li>Threat modeling and attacker TTP analysis</li><li>Compliance and framework alignment (NIST, CIS, OWASP, MITRE ATT&amp;CK)</li><li>Cloud security posture and configuration review</li></ul>Tools &amp; ContextYou'll work with, or help AI systems reason about, the same tools and artifacts used in professional cybersecurity environments, including:<ul><li>SIEM platforms, log analysis, and alert triage workflows</li><li>Vulnerability scanners and penetration testing tools (Nmap, Burp Suite, Metasploit, Nessus, etc.)</li><li>Network analysis tools (Wireshark, tcpdump, Zeek)</li><li>Security frameworks and standards (NIST CSF, MITRE ATT&amp;CK, CIS Benchmarks, OWASP Top 10)</li><li>Cloud security tooling (AWS Security Hub, Azure Defender, GCP Security Command Center)</li><li>Scripting for automation and analysis (Python, Bash, PowerShell)</li><li>Incident response playbooks and forensic documentation</li></ul>Requirements<ul><li>3+ years of professional experience in cybersecurity, in roles such as security analyst, penetration tester, incident responder, security engineer, or security architect</li><li>Relevant certifications (CISSP, CEH, OSCP, GIAC, CompTIA Security+, or equivalent) or demonstrable hands-on expertise</li><li>Understanding of both offensive and defensive perspectives</li><li>Ability to write clear, well-scoped security tasks with realistic scenarios and unambiguous evaluation criteria</li></ul>You May Be a Good Fit If<ul><li>You've responded to real incidents, triaged real alerts, or tested real systems, not just completed labs</li><li>You can explain why a finding matters in business terms, not just technical ones</li><li>You're comfortable reasoning about attacker behavior and can map TTPs to defensive actions</li><li>You prefer flexible, contract-based engagements over traditional full-time roles</li></ul>How Engagements Work<ul><li>Fully remote, contract-based work</li><li>Minimum commitment: 10 hours per week</li><li>Compensation is hourly, aligned with experience and impact, with payments issued through Deel</li><li>Performance and contribution quality are tracked to support future opportunities</li></ul>Pay: $100.00 - $105.00 per hourWork Location: Remote

Cybersecurity Specialist

PROZ TECHNOLOGIES

Job Title: SOC L2 Analyst (OT Security) Location: Doha, Qatar (On-site)About the RoleWe are looking for an experienced SOC L2 Analyst to join a leading Security Operations Center (SOC) team in Qatar. The role focuses on advanced threat monitoring, incident investigation, and response across both IT and Operational Technology (OT) environments.This is an excellent opportunity for cybersecurity professionals with strong SIEM and incident handling experience, especially those with exposure to industrial/OT security systems.Key Responsibilities<ul><li>Investigate and analyze security alerts and incidents, including escalations from L1 analysts</li><li>Perform in-depth threat analysis across IT and OT environments</li><li>Act as an incident responder for security events and recommend remediation actions</li><li>Monitor and manage SIEM alerts, logs, and SOC tickets within SLA timelines</li><li>Escalate critical incidents to L3/Senior Analysts when required</li><li>Support and mentor junior SOC analysts (L1)</li><li>Collaborate with internal teams to improve threat detection and response capabilities</li><li>Contribute to SOC documentation, runbooks, and knowledge base</li></ul>Required Skills &amp; Experience<ul><li>Minimum 5+ years of experience in SOC / Cybersecurity operations</li><li>Strong experience with SIEM tools (Splunk, QRadar, ArcSight, Azure Sentinel, etc.)</li><li>Hands-on experience in incident detection, investigation, and response</li><li>Strong knowledge of network security, logs, and attack patterns</li><li>Experience with security tools such as EDR, IDS/IPS, Firewalls, Vulnerability Scanners</li><li>Familiarity with MITRE ATT&amp;CK framework</li><li>Good understanding of Windows, Linux, and network environments</li></ul>Preferred (Nice to Have)<ul><li>Experience with OT / ICS / SCADA security environments</li><li>Knowledge of protocols like Modbus, DNP3, BACnet</li><li>Exposure to industrial cybersecurity frameworks</li><li>Basic scripting knowledge (Python, PowerShell, Bash)</li></ul>Certifications (Preferred)<ul><li>SC-200, GCIH, CEH, or equivalent cybersecurity certifications</li><li>SIEM certifications (Splunk, Azure Sentinel, etc.)</li><li>OT Security certifications (e.g., Nozomi) are a plus</li></ul>Ideal Candidate<ul><li>SOC L2 Analyst / Senior Security Analyst</li><li>Experience working in MSSP or enterprise SOC environments</li><li>Strong analytical and problem-solving skills</li><li>Ability to work in a 24x7 SOC environment</li></ul>Job Type: PermanentPay: Up to QAR15,000.00 per monthWork Location: In person

SOC L2 Analyst (OT Security)

DoorDash

<div><h2 class="jobSectionHeader">About the Team</h2>

The Global Safety and Security team advances DoorDash through the protection of people, property, operations, brand, and reputation. We manage safety and security risk and provide value across the business through technology, and a people-first approach. Our team strives to always be in front and there for our people anytime, anywhere.
<h2 class="jobSectionHeader">
About the Role</h2>

The Physical Security Agent, Critical Incident Response Team (CIRT) is responsible for real-time monitoring, triage, and response to incidents that impact DoorDash's global workforce, assets, and operations. You'll serve as a front-line responder, analyzing alerts, coordinating response actions, and escalating issues according to established Global Safety &amp; Security (GSS) protocols.

This role sits at the heart of DoorDash's emergency response network &mdash; ensuring rapid, informed, and coordinated action during critical events such as natural disasters, workplace emergencies, or significant disruptions. Working closely with regional and global partners, you'll help keep DoorDash's people safe and operations running smoothly around the clock.
<h2 class="jobSectionHeader">
You're excited about this opportunity because you will&hellip;</h2>
<h4 class="jobSectionHeader">Security Operations &amp; Monitoring</h4>
<ul><li>Monitor and assess alerts from global intelligence, safety, and security systems to identify potential threats or incidents</li>
<li>Patrol and assess potential behavioral escalations or concerns</li>
<li>Conduct routine lobby and facility patrols to ensure safety, security, and compliance</li>
<li>Perform door, camera, and access point checks</li>
</ul><h4 class="jobSectionHeader">Access Control &amp; Visitor Management</h4>
<ul><li>Manage employee and guest badging, including badge printing, activation, and access level assignments (experience with Genetec, Lenel S2, or similar systems)</li>
</ul><h4 class="jobSectionHeader">Incident Response &amp; Safety</h4>
<ul><li>Triage incidents, determining severity and escalation requirements in accordance with CIRT standard operating procedures</li>
<li>Act as the initial point of contact for incident reporting, ensuring information is captured accurately and escalated efficiently</li>
<li>De-escalate situations involving employees, vendors, and guests as needed</li>
<li>Support activation and execution of emergency response and crisis communication protocols</li>
</ul><h4 class="jobSectionHeader">Employee Engagement</h4>
<ul><li>Coordinate with internal teams (e.g., Workplace, HR, Legal, Comms, Operations) and external partners (e.g., law enforcement, emergency services) during incident response</li>
<li>Disseminate timely situational updates and intelligence to relevant stakeholders</li>
</ul><h4 class="jobSectionHeader">Asset &amp; Inventory Management</h4>
<ul><li>Maintain inventory, readiness, and restocking of first aid kits, AEDs, and other emergency response materials in coordination with Workplace teams</li>
<li>Ensure emergency supplies are documented, tracked, and available to support incident response operations</li>
</ul><h4 class="jobSectionHeader">Documentation, Compliance &amp; Technology</h4>
<ul><li>Maintain SOPs, post orders, incident reports, and audit records</li>
<li>Ensure adherence to corporate safety, security, and compliance standards</li>
<li>Maintain detailed logs, case notes, and documentation using Jira and other internal tools</li>
<li>Participate in after-action reviews to improve process and operational efficiency</li>
</ul><h4 class="jobSectionHeader">Events Support</h4>
<ul><li>Support local events, executive visits, and executive protection details from an incident monitoring, coordination, and escalation perspective</li>
<li>Coordinate with Workplace, Security, and event stakeholders to ensure appropriate safety coverage and response readiness</li>
<li>Monitor events for emerging risks, incidents, or escalations and facilitate timely response as needed</li>
</ul><h4 class="jobSectionHeader">Additional Duties</h4>
<ul><li>Support after-hours, weekend, and holiday response as required by business needs</li>
<li>Support special projects or operational needs as assigned</li>
<li>Assist with credentialing, crowd flow, and safety monitoring during higher-volume office days or events</li>
<li>Travel up to 5% as required for training or business support</li>
</ul><h4 class="jobSectionHeader">Schedule &amp; Work Environment</h4>
<ul><li>On-site role, 40 hours per week</li>
<li>Schedule may vary based on operational needs</li>
<li>After-hours, weekends, and holidays as required by business needs</li>
</ul><h2 class="jobSectionHeader">We're excited about you because&hellip;</h2>
<ul><li>2&ndash;4+ years of experience in emergency management, public safety, dispatch, GSOC, or related security operations environment</li>
<li>CPR, First Aid, AED certification (current)</li>
<li>Advanced First Aid training (EMT preferred)</li>
<li>Strong analytical and situational awareness skills &mdash; able to prioritize under pressure</li>
<li>Exceptional written and verbal communication, particularly in high-stakes or time-sensitive situations</li>
<li>Familiarity with incident management systems and communication tools (e.g., Everbridge, Dataminr, OnSolve, or similar)</li>
<li>Calm and composed in emergencies, with strong problem-solving and judgment skills</li>
<li>Willingness to work non-standard hours, including nights, weekends, and holidays</li>
<li>Fluency in English required; additional language skills (Spanish, French, or Mandarin) a plus</li>
<li>Bachelor's degree or equivalent work experience in a relevant field (e.g., emergency management, criminal justice, homeland security)</li>
<li>Great communication and relationship building skills</li>
</ul><h3 class="jobSectionHeader">You'll Love This Role If</h3>
<ul><li>You thrive in high-tempo, real-time environments where every second matters</li>
<li>You find purpose in helping protect people and operations from emerging risks</li>
<li>You enjoy staying calm under pressure and making smart, quick decisions</li>
<li>You value teamwork, precision, and continuous improvement</li></ul> 


Notice to Applicants for Jobs Located in NYC or Remote Jobs Associated With Office in NYC Only

We use Covey as part of our hiring and/or promotional process for jobs in NYC and certain features may qualify it as an AEDT in NYC. As part of the hiring and/or promotion process, we provide Covey with job requirements and candidate submitted applications. We began using Covey Scout for Inbound from August 21, 2023, through December 21, 2023, and resumed using Covey Scout for Inbound again on June 29, 2024.

The Covey tool has been reviewed by an independent auditor. Results of the audit may be viewed here: Covey<div><h2 class="jobSectionHeader">
About DoorDash</h2>

At DoorDash, our mission to empower local economies shapes how our team members move quickly, learn, and reiterate in order to make impactful decisions that display empathy for our range of users&mdash;from Dashers to merchant partners to consumers. We are a technology and logistics company that started by enabling door-to-door delivery, and we are looking for team members who can help us go from a company that is known as the place you order food to a company that people turn to for any and all goods. 
 
DoorDash is growing rapidly and changing constantly, which gives our team members the opportunity to share their unique perspectives, solve new challenges, and own their careers. We're committed to supporting employees' happiness, healthiness, and overall well-being by providing comprehensive benefits and perks including premium healthcare, wellness expense reimbursement, paid parental leave and more.
<h2 class="jobSectionHeader">
Our Commitment to Diversity and Inclusion</h2>

We're committed to growing and empowering a more inclusive community within our company, industry, and cities. That's why we hire and cultivate diverse teams of people from all backgrounds, experiences, and perspectives. We believe that true innovation happens when everyone has room at the table and the tools, resources, and opportunity to excel.

Statement of Non-Discrimination: In keeping with our beliefs and goals, no employee or applicant will face discrimination or harassment based on: race, color, ancestry, national origin, religion, age, gender, marital/domestic partner status, sexual orientation, gender identity or expression, disability status, or veteran status. Above and beyond discrimination and harassment based on &quot;protected categories,&quot; we also strive to prevent other subtler forms of inappropriate behavior (i.e., stereotyping) from ever gaining a foothold in our office. Whether blatant or hidden, barriers to success have no place at DoorDash. We value a diverse workforce &ndash; people who identify as women, non-binary or gender non-conforming, LGBTQIA+, American Indian or Native Alaskan, Black or African American, Hispanic or Latinx, Native Hawaiian or Other Pacific Islander, differently-abled, caretakers and parents, and veterans are strongly encouraged to apply. Thank you to the Level Playing Field Institute for this statement of non-discrimination.

Pursuant to the San Francisco Fair Chance Ordinance, Los Angeles Fair Chance Initiative for Hiring Ordinance, and any other state or local hiring regulations, we will consider for employment any qualified applicant, including those with arrest and conviction records, in a manner consistent with the applicable regulation.

If you need any accommodations, please inform your recruiting contact upon initial connection.</div></div>

Agent, Critical Incident Response Team - New York, NY

Uber

<div>About the Role
 
 
Uber's Security Response and Investigations (SRI) team is the cybersecurity incident response body at Uber. SRI responds to security incidents and mitigates security threats across the company. As a Security Technologist on SRI, 
<ul><li>
You will be on the front-line of defence for the Uber Security Incident Response program by handling triage and investigations for all security alerts for Uber globally across all environments (on-prem and clouds).
</li><li>You will build Standard Operating Procedures (SOP) and help improve the incident response program.
</li><li>You will build automation workflows to increase incident response efficiency and consistency</li><li>
You will serve as an incident coordinator during high and critical severity incidents.</li><li>
You will do the Threat Hunts to identify the potential threats to Uber</li><li>
Expect to work weekend shift (Saturday / Sunday)</li></ul> 
What the Candidate Will Need / Bonus Points
- What the Candidate Will Do - 
<ul><li>
Conduct rapid response, mitigation, investigations and forensics on highest priority incidents impacting Uber and user data.</li><li>
Partner with global team members to drive response and investigations globally.</li><li>
Partner closely with incident commanders, leading incident investigations.
</li><li>Produce concise yet thorough case reports for internal and external stakeholders.</li><li>
You will build automation workflows to increase incident response efficiency and consistency</li><li>
You will serve as an incident coordinator during high and critical severity incidents.</li><li>
Expect to work weekend shift (Saturday / Sunday)</li></ul> 
- Basic Qualifications - 
<ul><li>
Graduate in Computer Science or CyberSecurity</li><li>
Understanding of cybersecurity fundamentals including network protocols (e.g. TCP/IP stack) and security, system security, and email security;</li><li>
Security monitoring and response in a SOC/SecOps environment;</li><li>
Cyber intel frameworks such as ATT&amp;CK framework and kill-chain model;</li><li>
Digital Forensic and Incident Response; SIEM (Security Information and Event Management) and SOAR (Security Orchestration, Automation, Response) tools;</li><li>
SOAR automations &amp; scripting</li><li>
Understanding of Cloud Infra Skills (such as AWS and GCP) and leveraging Agentic AI (including an understanding of MCP servers).</li></ul> 
- Preferred Qualifications - 
<ul><li>
Experience with cybersecurity forensic methodologies and software.</li><li>
1+ years of hands-on experience in a cybersecurity role.
</li><li>Experience driving complex incidents or leading investigations end-to-end.</li><li>
Threat hunting and Automation experience (SOAR/Python).</li><li>
Experience working crisis events for a global company. Ability to work across geographically distributed teams.
</li><li>Certifications in Security is a plus.</li><li>
Degree in Cybersecurity</li></ul> 
 
 
 
For San Francisco, CA-based roles: The base salary range for this role is USD$133,000 per year - USD$140,000 per year. For Seattle, WA-based roles: The base salary range for this role is USD$133,000 per year - USD$140,000 per year. For Sunnyvale, CA-based roles: The base salary range for this role is USD$133,000 per year - USD$140,000 per year. For all US locations, you will be eligible to participate in Uber's bonus program, and may be offered an equity award &amp; other types of comp. All full-time employees are eligible to participate in a 401(k) plan. You will also be eligible for various benefits. More details can be found at the following link https://jobs.uber.com/en/benefits.</div>

Security Technologist I

Deloitte

<div>
 
 Cyber Security I Incident Response Senior Engineer
 
 
 ,
 
 
 Cairo. Egypt
 
 
 
 
 Connect to your career at Deloitte
 
 
 
 
 Deloitte
 
 
 ,
 
 established globally in 1845, is the world&rsquo;s largest and leading professional services firm, providing Audit &amp; Assurance, Tax &amp; Legal and Consulting and related services to public and private clients spanning multiple industries. Present in more than 150 countries, Deloitte is distinct in its ability to help clients solve their most complex problems, from strategy to implementation.
 
 
 Deloitte innovation hub (DIH) is a strategic initiative/priority established by Deloitte North &amp; South Europe (NSE) to support our ambition to become the leading business transformation partner of choice for our clients and to expand and scale our delivery footprint across EMEA. With access to a scaled, diverse, highly skilled, motivated, and engaged workforce, DIH is delivering complex technical solutions for clients&rsquo; most complex business problems, across Portfolios that include &lsquo;Strategy &amp; Transactions&rsquo;, &lsquo;Customer&rsquo;, &lsquo;Engineering, AI &amp; Data, &lsquo;Enterprise, Technology &amp; Performance&rsquo; and &lsquo;Cyber&rsquo;. DIH is aiming to become the destination for top talents in Egypt for a long, exciting career.
 
 
 We invest in outstanding people of diverse talents and backgrounds and empower them to achieve more than they could elsewhere. Our work combines advice with action and integrity. We believe that when our clients and society are stronger, so are we. Our organization has grown in scale and diversity, providing services across the region, with our shared culture remaining the same. We aim to help clients realize their ambitions, make a positive difference in society, and maximize the success of our people. This drive fuels the commitment and humanity that run deep through our every action.
 
 
 
 Connect to your opportunity.
 
 
 
 As a
 
 Digital Forensics
 
 
 Incident Response Senior Engineer
 
 
 ,
 
 you will be assisting clients with response to Cyber Incidents &amp; getting back to business, this includes data leaks, ransomware, unusual network traffic. Cyber criminals, from insider threat to nation-state sponsored hackers.
 
 
 
 Your Role Will Also Include The Following
 
 
 
 <ul>
 <li>
 Conduct analysis of log files, Windows event logs (Windows artifacts), and Linux artifacts to identify correlations using EDR, network monitoring tools, and SIEM platforms (e.g., Splunk, Microsoft Security Suite, and CrowdStrike Falcon). The role requires applying knowledge of forensic artifacts across various client platforms.
 </li>
 <li>
 Conduct in-depth analysis of malware, threat intelligence, and other relevant sources.
 </li>
 <li>
 Provide tactical support such as advice on triage, containment, eradication, and broader coordination during cyber incidents.
 </li>
 <li>
 Perform forensic analysis of systems and networks.
 </li>
 <li>
 Execute memory forensics.
 </li>
 <li>
 Perform Compromise Assessments and Threat Hunting projects in SIEM and EDR tooling.
 </li>
 <li>
 Create custom scripts (using Python) for parsing special log files, data sets, and images, etc.
 </li>
 <li>
 Create complex timelines based on findings and observations.
 </li>
 <li>
 Act as a member of the broader Deloitte Response Team, adding CIR skills to the overall team that includes privacy, crisis management, crisis communication, forensic investigations, and ICS/OT.
 </li>
 <li>
 Partake in the EMEA and Global technical incident responder community to build a strong network and share a knowledge base.
 </li>
 <li>
 Maintain flexible working hours to support the customer during high-impact incidents.
 
 
 </li>
 </ul>
 
 Connect To Your Skills And Professional Experience
 
 
 
 To succeed in this role, you need to have the following:
 
 
 <ul>
 <li>
 At least 3 years of experience in Cyber Incident Response and digital forensics, or similar response experiences in operational environments.
 </li>
 <li>
 Hands-on skills to perform sharp and in-depth analyzes, both using tooling such as EDR and network sensors, but also manual analysis, if the tools are not available.
 </li>
 <li>
 Broader experience in other technical areas of information security, such as penetration testing, threat intelligence or security operations, is beneficial.
 </li>
 <li>
 Experience in systems and/or network administration, engineering or architecture is a highly advantageous.
 </li>
 <li>
 Ability to work under pressure and keep track of the big picture while performing in-depth analysis.
 </li>
 <li>
 Ability to apply analytical insights at an organizational level, considering wider implications and threat actor attack paths and lifecycles.
 </li>
 <li>
 Relevant academic qualifications such as Master&rsquo;s or bachelor&rsquo;s degree in computer science, information security or related fields.
 </li>
 <li>
 Relevant industry qualifications to demonstrate understanding, for example CISSP, CISM, GCFE, GCFA, GREM, GCIH, CCIM, GCIA, CCNIA, CCHIA, CCMRE or similar
 
 
 </li>
 </ul>
 
 The Following Attributes Are Essential
 
 
 
 <ul>
 <li>
 Strong written, verbal and presentation skills.
 </li>
 <li>
 A willingness to work as part of a diverse team.
 </li>
 <li>
 A commitment to continuous improvement and lifelong learning.
 </li>
 <li>
 A passion for technology and a drive to deliver secure, high-quality solutions.
 </li>
 <li>
 Strong analytical and problem-solving skills.
 </li>
 <li>
 Excellent communication and interpersonal abilities.
 </li>
 <li>
 Ability to work effectively in a fast-paced and dynamic environment.
 </li>
 <li>
 Proactive and self-motivated with a keen attention to detail.
 
 
 </li>
 </ul>
 
 Connect to your service line &ndash; Technology and Transformation
 
 
 
 Distinctive thinking, deep expertise, and collaborative working. That&rsquo;s what connects us. That&rsquo;s what makes us Deloitte. If you want to help solve some of the biggest challenges around, join us. Together, we&rsquo;ll make an impact that matters.
 
 
 
 Personal independence
 
 
 
 Regulation and controls are standard practice in our industry and Deloitte is no exception. These controls provide important legal protection for both you and the firm. We are subject to several audit regulations, one of which requires that certain colleagues abide by specific personal independence constraints. This can mean that you and your "Immediate Family Members" are not permitted to hold certain financial interests (shares, funds, bonds etc.) with audit clients of the firm. The recruitment team will provide further detail as you progress through the recruitment process.
 
 
 
 Connect to your Industry
 
 
 
 &ldquo;What attracted me to Deloitte were the endless opportunities and the collective experience of other like-minded individuals. Deloitte&rsquo;s clients include many of the world&rsquo;s largest organizations; I wanted to be part of a team that made a difference that I could be proud of.&rdquo; Dan, T&amp;T.
 
 
 
 Connect with your colleagues
 
 
 
 Location: Cairo. Egypt
 
 
 Your Work, Your Way: We call our hybrid working vision Deloitte Works. And it does. We trust you to make the right choices around where, when, and how you work. You&rsquo;ll be able to make decisions about how you work best, to be collaborative, learn from colleagues, share your experiences, build the relationships that will fuel your career and prioritize your wellbeing. Having great conversations with your team and your leadership paves the way for great collaborative ways of working.
 
 
 
 Our commitment to you
 
 
 
 Making an impact is more than just what we do: it&rsquo;s why we&rsquo;re here. So we work hard to create an environment where you can experience a purpose you believe in, the freedom to be you, and the capacity to go further than ever before.
 
 
 We want you. The true you. Your own strengths, perspective, and personality. So, we&rsquo;re nurturing a culture where everyone belongs, feels supported and heard, and is empowered to make a valuable, personal contribution. You can be sure we&rsquo;ll take your wellbeing seriously, too. Because it&rsquo;s only when you&rsquo;re comfortable and at your best that you can make the kind of impact you, and we, live for.
 
 
 Your expertise is our capability, so we&rsquo;ll make sure it never stops growing. Whether it&rsquo;s from the complex work you do, or the people you collaborate with, you&rsquo;ll learn every day. Through world-class development, you&rsquo;ll gain invaluable technical and personal skills. Whatever your level, you&rsquo;ll learn how to lead.
 
 
 
 Connect to your next step
 
 
 
 A career at Deloitte is an opportunity to develop in any direction you choose. Join us and you&rsquo;ll experience a purpose you can believe in and an impact you can see. You&rsquo;ll be free to bring your true self to work every day. And you&rsquo;ll never stop growing, whatever your level.
</div>

Deloitte Innovation Hub I Cyber Security I Digital Forensics Incident Response Senior Engineer, Cairo, Egypt.

<div>
 
 About The Role
 
 
 
 Uber's Security Response and Investigations (SRI) team is the cybersecurity incident response body at Uber. SRI responds to security incidents and mitigates security threats across the company. As a Security Technologist on SRI,
 
 
 <ul>
 <li>
 You will be on the front-line of defence for the Uber Security Incident Response program by handling triage and investigations for all security alerts for Uber globally across all environments (on-prem and clouds).
 </li>
 <li>
 You will build Standard Operating Procedures (SOP) and help improve the incident response program.
 </li>
 <li>
 You will build automation workflows to increase incident response efficiency and consistency
 </li>
 <li>
 You will serve as an incident coordinator during high and critical severity incidents.
 </li>
 <li>
 You will do the Threat Hunts to identify the potential threats to Uber
 </li>
 <li>
 Expect to work weekend shift (Saturday / Sunday)
 
 
 </li>
 </ul>
 
 What The Candidate Will Need / Bonus Points
 
 
 
 ---- What the Candidate Will Do ----
 
 
 <ul>
 <li>
 Conduct rapid response, mitigation, investigations and forensics on highest priority incidents impacting Uber and user data.
 </li>
 <li>
 Partner with global team members to drive response and investigations globally.
 </li>
 <li>
 Partner closely with incident commanders, leading incident investigations.
 </li>
 <li>
 Produce concise yet thorough case reports for internal and external stakeholders.
 </li>
 <li>
 You will build automation workflows to increase incident response efficiency and consistency
 </li>
 <li>
 You will serve as an incident coordinator during high and critical severity incidents.
 </li>
 <li>
 Expect to work weekend shift (Saturday / Sunday)
 
 
 </li>
 </ul>
 
 Basic Qualifications
 
 
 
 <ul>
 <li>
 Graduate in Computer Science or CyberSecurity
 </li>
 <li>
 Understanding of cybersecurity fundamentals including network protocols (e.g. TCP/IP stack) and security, system security, and email security;
 </li>
 <li>
 Security monitoring and response in a SOC/SecOps environment;
 </li>
 <li>
 Cyber intel frameworks such as ATT&amp;CK framework and kill-chain model;
 </li>
 <li>
 Digital Forensic and Incident Response; SIEM (Security Information and Event Management) and SOAR (Security Orchestration, Automation, Response) tools;
 </li>
 <li>
 SOAR automations &amp; scripting
 </li>
 <li>
 Understanding of Cloud Infra Skills (such as AWS and GCP) and leveraging Agentic AI (including an understanding of MCP servers).
 
 
 </li>
 </ul>
 
 Preferred Qualifications
 
 
 
 <ul>
 <li>
 Experience with cybersecurity forensic methodologies and software.
 </li>
 <li>
 1+ years of hands-on experience in a cybersecurity role.
 </li>
 <li>
 Experience driving complex incidents or leading investigations end-to-end.
 </li>
 <li>
 Threat hunting and Automation experience (SOAR/Python).
 </li>
 <li>
 Experience working crisis events for a global company. Ability to work across geographically distributed teams.
 </li>
 <li>
 Certifications in Security is a plus.
 </li>
 <li>
 Degree in Cybersecurity
 
 
 </li>
 </ul>
 For San Francisco, CA-based roles: The base salary range for this role is USD$133,000 per year - USD$140,000 per year. For Seattle, WA-based roles: The base salary range for this role is USD$133,000 per year - USD$140,000 per year. For Sunnyvale, CA-based roles: The base salary range for this role is USD$133,000 per year - USD$140,000 per year. For all US locations, you will be eligible to participate in Uber's bonus program, and may be offered an equity award &amp; other types of comp. All full-time employees are eligible to participate in a 401(k) plan. You will also be eligible for various benefits. More details can be found at the following link https://jobs.uber.com/en/benefits., For San Francisco, CA-based roles: The base salary range for this role is USD$133,000 per year - USD$140,000 per year. For Seattle, WA-based roles: The base salary range for this role is USD$133,000 per year - USD$140,000 per year. For Sunnyvale, CA-based roles: The base salary range for this role is USD$133,000 per year - USD$140,000 per year. For all US locations, you will be eligible to participate in Uber's bonus program, and may be offered an equity award &amp; other types of comp. All full-time employees are eligible to participate in a 401(k) plan. You will also be eligible for various benefits. More details can be found at the following link https://jobs.uber.com/en/benefits.
</div>

Alignerr

<div>
 
 Incident Response Analyst (AI Training)
 
 
 
 
 About The Role
 
 
 
 We're partnering with leading AI research labs to build the next generation of AI-powered security tools &mdash; and we need experienced incident responders to help make them real.
 
 
 As an Incident Response Analyst, you'll work with realistic security incident data to evaluate, challenge, and improve AI systems designed to detect threats, correlate alerts, and support digital investigations. Your hands-on experience in security operations is exactly what's needed to make AI smarter and more accurate in this domain.
 
 
 <ul>
 <li>
 Organization: Alignerr
 </li>
 <li>
 Type: Hourly Contract
 </li>
 <li>
 Location: Remote
 </li>
 <li>
 Commitment: 10&ndash;40 hours/week
 
 
 </li>
 </ul>
 
 What You'll Do
 
 
 
 <ul>
 <li>
 Analyze real-world security events, alerts, and incident cases
 </li>
 <li>
 Identify root cause, assess impact, and determine appropriate remediation steps
 </li>
 <li>
 Evaluate detection rules, alerting pipelines, and investigative playbooks for accuracy and effectiveness
 </li>
 <li>
 Review and validate AI-generated incident analysis to ensure it reflects how real SOC teams operate
 </li>
 <li>
 Provide structured, expert feedback that directly shapes how AI handles security investigations
 
 
 </li>
 </ul>
 
 Who You Are
 
 
 
 <ul>
 <li>
 2+ years of hands-on experience in SOC, incident response, or security operations
 </li>
 <li>
 Proficient with SIEM platforms, alert queues, and investigation tooling
 </li>
 <li>
 Skilled at separating meaningful threats from noise in high-volume alert environments
 </li>
 <li>
 Detail-oriented with strong written communication skills
 </li>
 <li>
 Self-motivated and comfortable working independently on async, task-based assignments
 
 
 </li>
 </ul>
 
 Nice to Have
 
 
 
 <ul>
 <li>
 Experience with threat hunting, digital forensics, or malware analysis
 </li>
 <li>
 Familiarity with frameworks like MITRE ATT&amp;CK or NIST IR
 </li>
 <li>
 Background in cloud security, endpoint detection, or network forensics
 </li>
 <li>
 Prior experience in AI data annotation or evaluation workflows
 
 
 </li>
 </ul>
 
 Why Join Us
 
 
 
 <ul>
 <li>
 Work directly on frontier AI systems alongside top research labs
 </li>
 <li>
 Fully remote and flexible &mdash; work on your own schedule
 </li>
 <li>
 Freelance perks: autonomy, variety, and global collaboration
 </li>
 <li>
 Meaningful impact &mdash; your expertise helps define how AI understands cybersecurity
 </li>
 <li>
 Potential for ongoing work and contract extension
 </li>
 </ul>
</div>

Incident Response Analyst

Search 1695+ Incident responder jobs near you this May. New roles added regularly across leading industries. Apply today.

1695 incident responder jobs Near Me

Cybersecurity Specialist

SOC L2 Analyst (OT Security)

Agent, Critical Incident Response Team - New York, NY

Security Technologist I

Deloitte Innovation Hub I Cyber Security I Digital Forensics Incident Response Senior Engineer, Cairo, Egypt.

Security Technologist I

Incident Response Analyst