incident response analyst

Acenet consulting

<div><div>Experience: 3 to 8 years
 
Location: Abu Dhabi
 
Job code: 101379
 
Posted on: Nov 27, 2025 
</div> 
About Us:
 
AceNet Consulting is a fast-growing global business and technology consulting firm specializing in business strategy, digital transformation, technology consulting, product development, start-up advisory and fund-raising services to our global clients across banking &amp; financial services, healthcare, supply chain &amp; logistics, consumer retail, manufacturing, eGovernance and other industry sectors. We are looking for hungry, highly skilled and motivated individuals to join our dynamic team. If you&rsquo;re passionate about technology and thrive in a fast-paced environment, we want to hear from you.
Job Summary:
 
We are hiring an Incident Response Engineer to manage security incidents, investigate threats, and coordinate response activities across the organization.
<div>Key Responsibilities:
 
<ul><li>Detect, respond, and remediate cyber incidents and alerts.
</li><li>Perform digital forensics and root cause analysis.
</li><li>Develop incident playbooks and response processes.
</li><li>Collaborate with SOC teams for advanced threat detection.
</li><li>Conduct post-incident reviews and create improvement plans.
</li></ul></div><div>Role Requirements and Qualifications:
 
<ul><li>3&ndash;8 years of incident response or SOC experience.
</li><li>Strong knowledge of malware analysis, threat hunting, and forensics tools.
</li><li>Experience with SIEM, SOAR, EDR solutions.
</li></ul></div><div>Certifications:
 
<ul><li>CSIRT, GCFA, GCIH preferred.
</li></ul></div><div>Why Join Us:
 
<ul><li>Opportunities to work on transformative projects, cutting-edge technology and innovative solutions with leading global firms across industry sectors.
</li><li>Continuous investment in employee growth and professional development with a strong focus on up &amp; re-skilling.
</li><li>Competitive compensation &amp; benefits, ESOPs and international assignments.
</li><li>Supportive environment with healthy work-life balance and a focus on employee well-being.
</li><li>Open culture that values diverse perspectives, encourages transparent communication and rewards contributions.
</li></ul></div>How to Apply:
 
If you are interested in joining our team and meet the qualifications listed above, please apply and submit your resume highlighting why you are the ideal candidate for this position.</div>

Incident Engineer / Incident Response Analyst

Alyn Inc.

Company OverviewAlyn Inc. partners with Fortune 50 companies and top government agencies to enhance their Cybersecurity Operations programs. Our mission is to align organizational structures with NextGen initiatives, ensuring efficiency and effectiveness in cybersecurity through expert guidance.Digital Forensic Analyst Summary:<ul><li>Alyn Inc. is seeking an experienced candidate to serve as a Senior Digital Forensic Incident Response Analyst. The successful candidate is experienced in numerous security technologies, understands the motivations and capabilities of Advanced Persistent Threat actors, can conduct incident response activities in a large enterprise environment and can communicate risks and make recommendations associated with specific network and Malware threats.</li></ul>Digital Forensics Analyst Responsibilities:<ul><li>Review and analyze data and network traffic from numerous security tools such as full packet captures and security device logs in order to determine root cause of security anomalies;</li><li>Conduct digital forensic analysis of computer systems suspected of being compromised or exhibiting anomalous activity;</li><li>Conduct analysis of suspicious links delivered via e-mail for malicious intent, and review network traffic for associated network traffic;</li><li>Conduct basic static and dynamic malware analysis of malicious files;</li><li>Contribute to incident response, maintaining relevant communication in emails, ticket summaries, analysis, and reporting;</li><li>Make sound recommendations for remediation of compromised systems and any relevant counter-measures;</li><li>Review, create, or document standard operating procedures, recommendations, project specific documents, and resource guides as needed;</li><li>Drive continuous process improvement;</li><li>Demonstrate and encourage innovative thinking, continuous learning and sharing of best practices;</li><li>Maintain strong working relationship with the client to ensure a high degree of client satisfaction.</li></ul>Digital Forensic Analyst Required Qualifications:<ul><li>5 to 7 years of strong network security experience and incident handling in an enterprise environment;</li><li>2+ year of digital forensic incident response (DFIR) experience;</li><li>Understanding of a variety of security tools including firewall logs, intrusion detection systems, windows logs, event management, packet capture, packet sniffing technology;</li><li>SMTP Header analysis and e-mail routing behaviors;</li><li>Knowledge in use of various Malware Sandbox environments;</li><li>Static and dynamic malware analysis;</li><li>Experience with FTK Forensic Software, X-Ways and other forensic and enterprise incident response tools;</li><li>Ability to lead, coach, and advise team members as well as work independently and with minimal supervision;</li><li>Must be a US Citizen</li></ul>Education:<ul><li>BA/BS or equivalent</li><li>GCIH, GCFA, CISSP</li></ul>Job Types: Full-time, PermanentPay: $125,000.00 - $150,000.00 per yearBenefits:<ul><li>401(k)</li><li>401(k) matching</li><li>Dental insurance</li><li>Employee assistance program</li><li>Employee discount</li><li>Flexible spending account</li><li>Health insurance</li><li>Health savings account</li><li>Life insurance</li><li>Paid time off</li><li>Professional development assistance</li><li>Referral program</li><li>Tuition reimbursement</li><li>Vision insurance</li></ul>Experience:<ul><li>Cybersecurity Incident Response: 5 years (Required)</li><li>Digital Forensic: 3 years (Required)</li></ul>Security clearance:<ul><li>Secret (Preferred)</li></ul>Ability to Commute:<ul><li>Atlanta, GA 30329 (Required)</li></ul>Work Location: In person

Senior Digital Forensic Incident Response Analyst (5+ years of Exp Req)

Trust Arabia Administrative Services & Consultancy

About the RoleWe are seeking an experienced Security Operations Center (SOC) Analyst. The ideal candidate will have strong analytical skills, a proactive mindset, and proven experience in detecting, analyzing, and responding to cybersecurity incidents. This role combines strategic thinking with hands-on technical expertise to ensure our security defenses remain resilient against evolving threats.Key Responsibilities<ul><li>Monitor and analyze security alerts from SIEM, IDS/IPS, firewalls, and endpoint protection tools.</li><li>Investigate, triage, and respond to security incidents, identifying root causes and implementing corrective actions.</li><li>Conduct proactive threat hunting and vulnerability assessments.</li><li>Develop and maintain incident response procedures and playbooks.</li><li>Collaborate with IT and network teams to strengthen overall security posture.</li><li>Prepare detailed reports and provide recommendations to senior management on emerging threats and mitigation strategies.</li></ul>Mandatory Requirements<ul><li>Experience: 4&ndash;7 years in a SOC Analyst or related cybersecurity role.</li><li>Language: Fluent in English (written and spoken).</li><li>Availability: Ready to join by January 26.</li><li>License: Valid driving license.</li><li>Strong hands-on experience with systems and security tools (configuration, troubleshooting, optimization).</li><li>Solid understanding of security frameworks such as MITRE ATT&amp;CK, NIST, and ISO 27001.</li><li>Proficiency with SIEM platforms like Microsoft Sentinel, Splunk, or IBM QRadar.</li></ul>Preferred Qualifications (Plus Points)<ul><li>Arabic language proficiency.</li><li>Experience in the Oil &amp; Gas sector, especially with industrial control systems (ICS) or OT security.</li><li>Relevant certifications such as GCIA, GCIH, CEH, CompTIA Security+, or CISSP.</li></ul>Soft Skills<ul><li>Excellent communication and reporting abilities.</li><li>Strong analytical and problem-solving mindset.</li><li>Ability to perform effectively under pressure in incident response scenarios.</li><li>Team-oriented, adaptable, and committed to continuous improvement.</li></ul>Job Type: Full-time

SOC Analyst

UNIVERSAL Technologies 

UNIVERSAL Technologies is seeking a Forensics Analyst for a hybrid role based in Brooklyn, NYC. Candidates with an active LinkedIn account are preferred.PositionThe Forensics Analyst will investigate network intrusions and other cybersecurity incidents to determine their cause, scope, and impact. This role requires extensive experience in digital forensics, incident response, and advanced threat management techniques.WHO WE AREUNIVERSAL Technologies, LLC is a Women-Owned (M/WBE) IT solutions and consulting company focused on delivering enterprise systems that significantly improve our clients' IT performance. We work across the IT spectrum, including Development, Business/Systems/Data Analysis, Project Management, Cyber Security, Network Engineering, and High-Level System Architecture. The pride in the services we provide and the accessibility and flexibility we offer to employees are what make Universal Technologies stand out! We aim to propel your IT career to the next level and excite our employees with new and challenging projects.WHAT WE OFFEROur W2 employees can expect the following benefits:<ul><li>Competitive pay</li><li>Health/Dental Insurance</li><li>Group Life Insurance</li><li>401K</li><li>HSA/FSA</li><li>Pre-Tax Transportation Program</li><li>Generous Paid Time Off/Holiday Policy</li></ul>SCOPE OF SERVICESAs a Forensics Analyst, your responsibilities will include:<ul><li>Investigating network intrusions and other cybersecurity incidents to determine the cause, scope, and impact of the breach, including performing host-based and network-based forensic analysis.</li><li>Researching and developing new techniques and procedures to improve digital forensic processes.</li><li>Producing high-quality written reports presenting complex technical issues clearly and concisely.</li><li>Managing and maintaining analysis labs and forensic tools used for investigations.</li><li>Ensuring data collection and preservation adhere to industry-standard best practices and evidence integrity requirements.</li><li>Assisting the Cyber Emergency Response Team during critical incidents.</li></ul>MANDATORY SKILLS/EXPERIENCENote: Candidates who do not have the mandatory skills will not be considered.<ul><li>A minimum of 4 years of experience in Threat Management, Forensic Investigations, or Incident Response environments.</li><li>Proficiency in performing digital forensic investigations on various platforms and operating systems with a deep understanding of digital forensics processes and tools.</li></ul>DESIRABLE SKILLS/EXPERIENCE<ul><li>Experience with a wide range of forensic tools such as TZWorks, X-Ways, SIFT, AXIOM, and Volatility.</li><li>Experience with memory analysis tools like Volatility.</li><li>Experience with Linux and open-source tools.</li><li>Experience investigating intrusions on Windows and Linux/Unix operating systems.</li><li>Knowledge of gathering, accessing, and assessing evidence from computer systems and electronic devices.</li><li>Knowledge of virtual environments, forensic imaging techniques, and various operating systems' artifacts (e.g., Microsoft Windows, Linux/UNIX, Mac OS).</li><li>Strong analytical skills with a thorough understanding of file systems.</li></ul>UNIVERSAL Technologies is an Equal Opportunity Employer.Job Types: Full-time, ContractPay: $65.00 - $69.00 per hourExpected hours: 35 per weekApplication Question(s):<ul><li>Can you work a hybrid schedule in Brooklyn, NY? </li><li>Do you have a minimum of 4 years of experience in Threat Management, Forensic Investigations, or Incident Response environments?</li><li>Experience with digital forensic investigations on various platforms and operating systems with a deep understanding of digital forensics?</li><li>Experience with a wide range of forensic tools such as TZWorks, X-Ways, SIFT, AXIOM, and Volatility?</li><li>Experience investigating intrusions on Windows and Linux/Unix operating systems?</li></ul>Work Location: Hybrid remote in Brooklyn, NY 11201

Forensics Analyst

Nets-international Communication

Job SummaryThe SOC L2 Analyst is responsible for deeper analysis and incident response. They investigate alerts escalated by L1 analysts, perform root cause analysis, and coordinate containment and remediation efforts. L2 Analysts act as incident handlers and guide L1s on analysis procedures.Key Responsibilities<ul><li>Investigate and validate escalated incidents from SOC L1.</li><li>Perform detailed log analysis across multiple systems (firewalls, endpoints, servers).</li><li>Identify attack patterns, indicators of compromise (IOCs), and determine the scope and impact of attacks.</li><li>Coordinate with IT and security teams to contain and eradicate threats.</li><li>Develop and maintain incident response playbooks.</li><li>Perform threat hunting using EDR/XDR and SIEM tools.</li><li>Conduct malware analysis and support forensics where needed.</li><li>Mentor and train SOC L1 Analysts on triage and alert handling.</li><li>Contribute to improving detection rules and automation.</li><li>Document incidents thoroughly and prepare post-incident reports.</li></ul>Skills &amp; Knowledge<ul><li>Strong understanding of network security, firewalls, intrusion detection systems.</li><li>Experience with SIEM, EDR/XDR, and threat intelligence tools.</li><li>Knowledge of incident response lifecycle and MITRE ATT&amp;CK framework.</li><li>Ability to analyze logs from multiple sources and correlate events.</li><li>Scripting or automation skills (Python, PowerShell) are an advantage.</li></ul>Education &amp; Certifications<ul><li>Bachelor&rsquo;s in Cybersecurity, Computer Science, or Information Security.</li><li>3 to 5 years of SOC or cybersecurity experience.</li><li>Preferred certifications:</li><li>CompTIA CySA+</li><li>EC-Council Certified SOC Analyst (CSA)</li><li>Microsoft SC-200</li><li>GIAC Certified Incident Handler (GCIH)</li><li>Certified Ethical Hacker (CEH)</li></ul>Job Type: Full-timeAbility to commute/relocate:<ul><li>&#305;stanbul: Reliably commute or planning to relocate before starting work (Required)</li></ul>Application Question(s):<ul><li>what is your monthly current salary?</li><li>what is your monthly expected salary?</li><li>what is your notice period?</li></ul>Education:<ul><li>Bachelor's (Required)</li></ul>Experience:<ul><li>Security Operation Centre L2: 5 years (Required)</li></ul>

Security Operation Centre L2

<div>
 
 Job Description
 
 
 
 As SOC Analyst you will be the first responder to incoming cyber security incidents across Wix environments, working closely with the incident-response team to protect business operations.
 
 
 
 Key Responsibilities
 
 
 
 <ul>
 <li>
 End-to-End Alert Handling &ndash; Own every alert type (SIEM, EDR, phishing, threat intel, internal feeds); rapidly triage, investigate, and escalate with actionable findings.
 </li>
 <li>
 SOAR Automation &ndash; Build and maintain playbooks that cut manual toil and accelerate response.
 </li>
 <li>
 Threat Hunting &ndash; Proactively identify anomalies and refine detection rules to strengthen coverage.
 </li>
 <li>
 Incident Documentation &ndash; Maintain thorough investigation logs and deliver concise end-of-shift reports.
 </li>
 <li>
 Collaboration &amp; Training &ndash; Partner with IR teams, share knowledge, and leverage continuous internal and third-party training.
 
 
 </li>
 </ul>
 
 Qualifications
 
 
 
 <ul>
 <li>
 2&ndash;5 years in a 24&times;7 SOC or equivalent incident-response role.
 </li>
 <li>
 Hands-on experience with SIEM, EDR, SOAR, and log analytics; familiarity with AWS, GCP, or Azure.
 </li>
 <li>
 Solid grasp of current attacker tactics, techniques, and procedures.
 </li>
 <li>
 Strong analytical and written communication skills for precise escalations.
 </li>
 <li>
 Certifications such as HTB CDSA, THM SAL1, CEH, or AWS Certified Cloud Practitioner (CCP) are preferred.
 </li>
 </ul>
 <li>
 
 
 </li>
 
 At this time we are seeking NY-based candidates who are able and willing to work on-site with a hybrid and rotating schedule, including nights and weekends
 
 
 
 
 Wix is only able to consider candidates who are authorized to work in the U.S. without any sponsorship requirements
 
 
 
 
 Additional Information
 
 
 
 We are Wix&rsquo;s Security Guild. We&rsquo;re a group of highly motivated Security Engineers that form part of the Wix R&amp;D group. We allow Wix Developers and users to achieve their goals without risk, often meaning we find or create unique solutions. Our work is exceptionally challenging due to Wix&rsquo;s scale, agility, and advanced technical diversity. When it comes to technology, we have the ultimate playground, and although we work together closely, there&rsquo;s always space for independence, innovation, and creativity.
 
 
 <li>
 
 
 </li>
 Approximate base compensation is $40 - 48/hour. In addition to base pay you will receive company RSUs as part of the compensation package. Final offer may vary and will be determined by various factors including location the role is expected to be performed, shift, candidate profile and ideal qualifications.
 
 
 In addition to a competitive compensation package and opportunities for professional growth, Wix offers comprehensive benefits to support the well-being and financial security of our employees.
</div>

Keeper Security, Inc.

<div>Keeper is hiring a talented SOC Analyst / Watch Officer (Tier 2) to join our Security Operations team. This can be a 100% remote position from select locations with an opportunity to work a hybrid schedule for candidates based in the El Dorado Hills, CA area.
Keeper&rsquo;s cybersecurity software is trusted by millions of people and thousands of organizations, globally. Keeper is published in 21 languages and is sold in over 120 countries. Join one of the fastest-growing cybersecurity companies and strengthen our 24/7 security operations.
About Keeper
Keeper Security is transforming cybersecurity for organizations globally with zero-trust privileged access management built with end-to-end encryption. Keeper&rsquo;s cybersecurity solutions are FedRAMP and StateRAMP Authorized, SOC 2 compliant, FIPS 140-2 validated, as well as ISO 27001, 27017 and 27018 certified. Keeper deploys in minutes, not months, and seamlessly integrates with any tech stack to prevent breaches, reduce help desk costs and ensure compliance. Trusted by millions of individuals and thousands of organizations, Keeper is the leader for password, passkey and secrets management, privileged access, secure remote access and encrypted messaging. Learn how our zero-trust and zero-knowledge solutions defend against cyber threats at KeeperSecurity.com.
About the Job
The Tier 2 SOC Analyst / Watch Officer serves as the escalation point for Tier 1 alerts and incidents, leading tactical investigation, containment, and remediation efforts. You will act as the on-shift lead, providing technical guidance, situational awareness, and operational direction during live security events. This role requires deep technical knowledge, investigative instinct and the ability to make real-time decisions under pressure. You will work closely with engineering, DevOps and incident response teams to ensure Keeper&rsquo;s environments remain secure, resilient and compliant.
Responsibilities<ul>
<li>
Lead end-to-end execution of complex DevOps and infrastructure programs, including perform in-depth triage and analysis of escalated alerts to determine scope, impact and root cause</li>
<li>Lead response actions such as isolating hosts, revoking credentials or blocking network indicators</li>
<li>Examine endpoint, network and cloud logs to reconstruct attack timelines and adversary behaviors</li>
<li>Execute and enhance incident response playbooks, detection rules and escalation criteria</li>
<li>Maintain operational command during assigned shifts, ensuring situational awareness, incident logging and proper shift handovers</li>
<li>Conduct proactive threat hunting for suspicious activity and emerging indicators of compromise</li>
<li>Validate data integrity from security tools (SIEM, EDR, IDS, etc.) and assist with tuning or integrations</li>
<li>Partner with IT, DevSecOps and compliance teams to mitigate vulnerabilities and improve defenses</li>
<li>Produce high-quality incident reports, lessons learned and recommendations for leadership</li>
</ul>
Requirements<ul>
<li>
Bachelor&rsquo;s degree in Cybersecurity, Computer Science or related field, or equivalent practical experience</li>
<li>2&ndash;4 years in a SOC, incident response or cyber defense role</li>
<li>Experience with SIEM platforms (e.g., Splunk, Sumo Logic, Sentinel) and EDR technologies</li>
<li>Strong understanding of MITRE ATT&amp;CK, threat actor TTPs and multi-source log correlation</li>
<li>Hands-on experience analyzing network traffic, endpoint behavior and cloud telemetry</li>
<li>Familiarity with scripting for automation and analysis (Python, PowerShell or Bash)</li>
<li>Strong written and verbal communication skills for incident reporting and coordination</li>
</ul>
Preferred Qualifications
<ul><li>Certifications such as GCIA, GCIH, CySA+, CEH or equivalent</li>
<li>Experience with SOAR platforms, automation pipelines and threat intelligence enrichment</li>
<li>Familiarity with AWS Security Hub, GuardDuty or other cloud-native security services</li>
<li>Background in root cause analysis, purple-team exercises or tabletop simulations</li>
<li>Experience supporting regulated environments (SOC 2, FedRAMP, ISO 27001, etc.)</li>
</ul>
Benefits<ul>
<li>
Medical, Dental &amp; Vision (inclusive of domestic partnerships)</li>
<li>Employer Paid Life Insurance &amp; Employee/Spouse/Child Supplemental life</li>
<li>Voluntary Short/Long Term Disability Insurance</li>
<li>401K (Roth/Traditional)</li>
<li>A generous PTO plan that celebrates your commitment and seniority (including paid Bereavement/Jury Duty, etc)</li>
<li>Above market annual bonuses</li>
</ul>
Keeper Security, Inc. is an equal opportunity employer and participant in the U.S. Federal E-Verify program. We celebrate diversity and are committed to creating an inclusive environment for all employees. 
Classification: Exempt</div>

SOC Analyst - Tier 2

Search 8765+ Incident response analyst jobs near you this December. New roles added regularly across leading industries. Apply today.

8765 incident response analyst jobs NEAR_ME

Incident Engineer / Incident Response Analyst

Senior Digital Forensic Incident Response Analyst (5+ years of Exp Req)

SOC Analyst

Forensics Analyst

Security Operation Centre L2

SOC Analyst

SOC Analyst - Tier 2