incident response engineer

Binance

<div>
 <div>
 Responsibilities
 <ul>
 <li>Design, deploy, and optimize DLP solutions across network, endpoint, and cloud.</li>
 <li>Build and refine data classification schemes for sensitive assets (wallets, trading algorithms, customer PII).</li>
 <li>Configure DLP policies to prevent data exfiltration while minimizing false positives.</li>
 <li>Monitor, analyze, and tune alerts and incidents for continuous improvement.</li>
 <li>Lead investigations of DLP incidents and insider threats,</li>
 <li>Conduct threat hunting and forensic analysis of data exfiltration attempts.</li>
 <li>Integrate DLP monitoring into broader SOC workflows and incident response playbooks.</li>
 <li>Build custom DLP tools and integrations (e.g., macOS Swift endpoint protection, Unix socket monitoring).</li>
 <li>Develop automation scripts, APIs, regexes and integrations to enhance detection and response.</li>
 <li>Explore AI/LLM-driven methods for anomaly detection and response efficiency.</li>
 <li>Ensure controls align with crypto and financial regulations (AML, KYC, GDPR, CCPA).</li>
 <li>Support audits and regulatory reviews related to data protection.</li>
 <li>Assess and mitigate data loss risks across trading platforms, onboarding systems, and blockchain infrastructure.</li>
 </ul>
 </div>
</div>

DLP & Incident Response Engineer

Realign

<div>Job Type: Contract
Job Category: IT
Job Description
<div>Job Title: Observability Engineer &ndash; Dynatrace &amp; BigPanda 
Location: Maclean, VA 
Employment Type: Contract</div><div></div><div> 
Job Summary: 
We are seeking a highly skilled Observability Engineer to design, implement, and manage enterprise-grade monitoring and incident response frameworks. The ideal candidate will have hands-on experience with Dynatrace and BigPanda, strong troubleshooting skills, and the ability to drive observability strategy across cloud-native and on-premise environments.</div><div></div><div> 
Key Responsibilities:</div><ul><div>
Develop, configure, and maintain monitoring solutions using Dynatrace, BigPanda, and related observability tools.</div><div>
Integrate alerts, metrics, and logs into a centralized incident management system.</div><div>
Design and implement automated event correlation, root cause analysis, and proactive alerting mechanisms.</div><div>
Collaborate with DevOps, SRE, and application teams to improve system reliability and performance.</div><div>
Create dashboards, reports, and KPIs to track system health and incident trends.</div><div>
Continuously optimize monitoring coverage and observability best practices across multi-cloud environments (AWS, Azure, GCP).</div><div>
Support on-call rotations and incident response efforts.</div></ul><div>
Required Skills &amp; Qualifications:</div><ul><div>
Hands-on experience with Dynatrace (APM, infrastructure monitoring, synthetic monitoring).</div><div>
Proficiency in BigPanda for event correlation and incident management.</div><div>
Strong understanding of monitoring frameworks, logging, and metrics collection (Prometheus, Grafana, ELK stack).</div><div>
Experience with cloud platforms (AWS, Azure, or GCP) and container orchestration (Kubernetes, Docker).</div><div>
Strong scripting skills (Python, Bash, or PowerShell) for automation and integration.</div><div>
Solid problem-solving skills and experience with incident response workflows.</div><div>
Familiarity with ITSM tools (ServiceNow, Jira) is a plus.</div></ul>
Required Skills
AWS ENGINEER DEVOPS ENGINEER SENIOR EMAIL SECURITY ENGINEER</div>

Observability Engineer Dynatrace & BigPanda-1

Bazzle Balloons

2. SOC Engineer / Cyber Security EngineerCertifications Required: CEH, CompTIA Security+, SOC Handling, SIEM Implementation&middot; Vendor-specific certifications: ELK, QRadar, Wazuh (advantage)&middot; Fortinet NSE, Cisco CyberOps, (plus)At least four years Bachelors in IT / Computer Science / Telecom/ EngineeringExperience: 3-4 years of relevant professional experience in SOC operations, cyber security, or incident response.Responsibilities:&middot; Monitor real-time threats and handle security incidents across Client IT systems using advanced SOC tools.&middot; Deploy, configure, and manage SIEM solutions (Wazuh, Splunk, ELK, QRadar, etc.) for log collection, analysis, intrusion detection, and anomaly reporting.&middot; Perform malware analysis, digital forensics, and evidence preservation to support cybercrime investigations.&middot; Implement and integrate threat intelligence feeds tailored for law enforcement use cases.&middot; Utilize frameworks such as MITRE ATT&amp;CK and NIST for incident detection, classification, and response.&middot; Conduct forensic investigations with tools such as Volatility, Autopsy, Ghidra, and IDA Pro.&middot; Carry out vulnerability assessments, penetration testing, and remediation planning.&middot; Monitor and tune firewalls, IDS/IPS, and VPN security systems.&middot; Familiarity with security tools and devices.&middot; Support law enforcement digital platforms (CCTV, bodycams, and surveillance systems) by securing data pipelines and ensuring data integrity.&middot; Conduct awareness sessions for Client officers on phishing, ransomware, and cyber hygiene best practices.&middot; Collaborate with Client units for proactive threat hunting and incident response.&middot; Manage the full incident response lifecycle: detection, triage, containment, eradication, recovery, and reporting.&middot; Prepare incident reports, forensic documentation, and compliance reviews for audits and investigations.&middot; Provide IT assistance during emergency response operations.&middot; Perform any other tasks assigned by Client.Job Type: Full-timeApplication Question(s):<ul><li>Your degree Bachelors in IT / Computer Science / Telecom/ Engineering completed? </li><li>Do you have 4 years of relevant professional experience in SOC operations, cyber security, or incident response?</li><li>Do you have a certificate of Fortinet NSE, Cisco CyberOps?</li></ul>License/Certification:<ul><li>CEH, certificate of CompTIA Security (Required)</li></ul>Work Location: In person

SOC Engineer / Cyber Security Engineer

BairesDev

<div>
 
 At BairesDev&reg;, we've been leading the way in technology projects for over 15 years. We deliver cutting-edge solutions to giants like Google and the most innovative startups in Silicon Valley.
 
 
 
 
 
 Our diverse 4,000+ team, composed of the world's Top 1% of tech talent, works remotely on roles that drive significant impact worldwide.
 
 
 
 
 
 When you apply for this position, you're taking the first step in a process that goes beyond the ordinary. We aim to align your passions and skills with our vacancies, setting you on a path to exceptional career development and success.
 
 
 
 
 
 Java Technical Support Engineer at BairesDev
 
 
 
 
 
 We are seeking a Java Technical Support Engineer to join our Incident Response Team. You'll monitor applications, resolve issues, and help maintain our Java-based systems. This welcoming role offers opportunities for professionals at various experience levels who are passionate about Java and technical support.
 
 
 
 
 
 What You'll Do:
 
 
 
 
 
 - Provide technical support coverage during business hours.
 
 
 - Monitor system performance and respond to alerts.
 
 
 - Troubleshoot and resolve issues in Java applications.
 
 
 - Document incidents and solutions for knowledge sharing.
 
 
 - Collaborate with development teams on improvements.
 
 
 - Participate in process enhancement initiatives.
 
 
 
 
 
 What we are looking for:
 
 
 
 
 
 - Experience with Java development and troubleshooting.
 
 
 - Familiarity with support roles and incident response.
 
 
 - Problem-solving and analytical thinking skills.
 
 
 - Good communication abilities.
 
 
 - Advanced level of English.
 
 
 
 
 
 How we do make your work (and your life) easier:
 
 
 
 
 
 - 100% remote work (from anywhere).
 
 
 - Excellent compensation in USD or your local currency if preferred
 
 
 - Hardware and software setup for you to work from home.
 
 
 - Flexible hours: create your own schedule.
 
 
 - Paid parental leaves, vacations, and national holidays.
 
 
 - Innovative and multicultural work environment: collaborate and learn from the global Top 1% of talent.
 
 
 - Supportive environment with mentorship, promotions, skill development, and diverse growth opportunities.
 
 
 
 
 
 Apply now and become part of a global team where your unique talents can truly thrive!
 
</div>

Java Technical Support Engineer - Remote Work

GoDaddy

<div><div><ul><li>R022687
</li></ul></div><div><ul><li>India
</li></ul></div><div></div><div><ul><li>Engineering
</li></ul></div><div><ul><li>Regular</li></ul></div></div><div></div>
 <div>Location Details: India (Remote)

At GoDaddy the future of work looks different for each team. Some teams work in the office full-time; others have a hybrid arrangement (they work remotely some days and in the office some days) and some work entirely remotely.
Remote: This is a remote position, so you&rsquo;ll be working remotely from your home. You may occasionally visit a GoDaddy office to meet with your team for events or meetings.

Join our team...

We are seeking a skilled and motivated Senior Security Engineer to join our Incident Response team. The ideal candidate will play a critical role in supporting incident response activities across diverse environments, including Windows, MacOS, Linux and AWS. You will work closely with senior engineers during investigations, assist in analysis, containment and recovery efforts, and contribute to the continuous improvement of our detection and response capabilities. This role provides the opportunity to grow your expertise while helping safeguard our organization against emerging threats.

What you'll get to do...
<ul>
<li>Serve as the escalation point for high-priority and complex security incidents, providing advanced troubleshooting, root cause analysis, and remediation guidance.</li>
<li>Support incident response investigations across Windows, MacOS, and Linux environments, AWS cloud infrastructure and services, Endpoint protection platforms, SIEM and Identity management tools.</li>
<li>Conduct advanced malware analysis and forensics to determine threat vectors, persistence mechanisms, and impact.</li>
<li>Lead investigations, deliver actionable findings to leadership, and drive internal projects that enhance incident response processes, fostering continuous improvement and innovation.</li>
<li>Develop and optimize security playbooks, detection rules, and tooling&mdash;including AWS-native, third-party, and AI-integrated solutions&mdash;to strengthen overall security posture.</li>
<li>Collaborate with IT, DevOps, and cloud teams to assist in hardening and recovery efforts.</li>
<li>Continue to develop technical expertise through mentorship and hands-on involvement in investigations.</li>
<li>Work flexible hours as required to support incident response and business needs.</li>
</ul>
Your experience should include...
<ul>
<li>4+ years of hands-on experience in cybersecurity, with at least 2 years in Dedicated incident response role or with at least 3 years in L3 security operations role.</li>
<li>Working knowledge of security investigations related to Windows, MacOS, Linux and AWS (CloudTrail, GuardDuty, etc.)</li>
<li>Scripting and automation familiarity (Python, PowerShell, or Bash) to assist in investigations.</li>
<li>Basic forensic investigation knowledge including image collection and chain of custody.</li>
<li>Security certifications strongly preferred (e.g., GCIA, GCIH, GCFA, AWS Security Specialty, ECIH, OSCP, Security+).</li>
</ul>
You might also have...
<ul>
<li>Familiarity with cloud-native and hybrid architectures.</li>
<li>Experience with security orchestration and automation platforms (SOAR) or automation workflows.</li>
<li>Experience collaborating with cross-regional or distributed teams.</li>
</ul>
We've got your back... We offer a range of total rewards that may include paid time off, retirement savings (e.g., 401k, pension schemes), bonus/incentive eligibility, equity grants, participation in our employee stock purchase plan, competitive health benefits, and other family-friendly benefits including parental leave. GoDaddy&rsquo;s benefits vary based on individual role and location and can be reviewed in more detail during the interview process.

We also embrace our diverse culture and offer a range of Employee Resource Groups (Culture). Have a side hustle? No problem. We love entrepreneurs! Most importantly, come as you are and make your own way.

About us... GoDaddy is empowering everyday entrepreneurs around the world by providing the help and tools to succeed online, making opportunity more inclusive for all. GoDaddy is the place people come to name their idea, build a professional website, attract customers, sell their products and services, and manage their work. Our mission is to give our customers the tools, insights, and people to transform their ideas and personal initiative into success. To learn more about the company, visit About Us.

At GoDaddy, we know diverse teams build better products&mdash;period. Our people and culture reflect and celebrate that sense of diversity and inclusion in ideas, experiences and perspectives. But we also know that&rsquo;s not enough to build true equity and belonging in our communities. That&rsquo;s why we prioritize integrating diversity, equity, inclusion and belonging principles into the core of how we work every day&mdash;focusing not only on our employee experience, but also our customer experience and operations. It&rsquo;s the best way to serve our mission of empowering entrepreneurs everywhere, and making opportunity more inclusive for all. To read more about these commitments, as well as our representation and pay equity data, check out our Diversity and Pay Parity annual report which can be found on our Diversity Careers page.

GoDaddy is proud to be an equal opportunity employer. GoDaddy will consider for employment qualified applicants with criminal histories in a manner consistent with local and federal requirements. Refer to our full EEO policy.

Our recruiting team is available to assist you in completing your application. If they could be helpful, please reach out to myrecruiter@godaddy.com.

GoDaddy doesn&rsquo;t accept unsolicited resumes from recruiters or employment agencies.</div>

Senior Security Engineer

Al Adyat consultancy

A SOC Engineer (Security Operations Center Engineer) is responsible for maintaining the security of an organization's IT infrastructure by monitoring, detecting, and responding to security incidents. Below is a typical job description for this role, including key responsibilities:Certificates Required:1. GCIH2. FOR 5083. GCFA-skilled at: Penetration testingRoles and Responsibilities:<ul><li>Monitoring and Incident Detection:</li><li>Continuously monitor security alerts and notifications from various security tools and technologies (e.g., SIEM systems, IDS/IPS, firewalls, etc.).</li><li>Investigate security incidents and potential threats.</li><li>Perform triage and prioritize incidents based on severity and impact.</li><li>Detect, analyze, and report any abnormal activity or potential threats in the network.</li><li>Incident Response and Mitigation:</li><li>Lead or assist in the response to security incidents, ensuring proper containment, eradication, and recovery procedures are followed.</li><li>Work with other teams (e.g., IT, network, and system admins) to mitigate security incidents and vulnerabilities.</li><li>Provide guidance on handling and escalating incidents based on predefined escalation paths.</li><li>Security Tools and Technology Management:</li><li>Manage, configure, and optimize security tools (such as SIEM, firewalls, and antivirus software) to enhance security operations.</li><li>Maintain logs and ensure the integrity of security infrastructure tools and devices.</li><li>Implement and update security protocols to ensure the organization&rsquo;s systems and data are protected.</li><li>Threat Intelligence and Vulnerability Management:</li><li>Collect and analyze threat intelligence data from various sources to identify emerging security threats and vulnerabilities.</li><li>Perform vulnerability assessments and recommend remediation actions based on findings.</li><li>Assist with patch management and ensure timely deployment of security patches.</li><li>Reporting and Documentation:</li><li>Document security incidents, actions taken, and lessons learned to improve future responses and security posture.</li><li>Generate reports on security incidents, system performance, and security operations metrics.</li><li>Present regular status updates on security incidents and trends to management.</li><li>Collaboration and Communication:</li><li>Collaborate with other teams (network security, IT, DevOps, etc.) to ensure a holistic security approach.</li><li>Communicate effectively with internal teams and external vendors to resolve security issues.</li><li>Provide training and knowledge transfer on security best practices to other employees.</li><li>Continuous Improvement:</li><li>Continuously assess and improve the effectiveness of security tools and processes.</li><li>Research new security technologies and trends to stay ahead of potential threats.</li><li>Participate in ongoing security awareness programs and training.</li><li>Compliance and Standards Adherence:</li><li>Ensure that security operations comply with relevant industry standards, regulations, and best practices (e.g., GDPR, HIPAA, PCI DSS).</li><li>Perform regular audits and assessments to ensure compliance with security policies.</li></ul>Job Type: Full-timePay: QAR13,000.00 - QAR15,000.00 per monthEducation:<ul><li>Bachelor's (Required)</li></ul>Experience:<ul><li>SOC: 4 years (Required)</li><li>Penetration testing : 1 year (Preferred)</li></ul>Language:<ul><li>Arabic (Preferred)</li><li>English (Preferred)</li></ul>License/Certification:<ul><li>Computer Science or Information Technology (Required)</li><li>GCIH (Preferred)</li><li>FOR 508 (Preferred)</li><li>GCFA (Preferred)</li></ul>

SOC Engineer (Security Operations Center Engineer)

Salesforce

<div>To get the best candidate experience, please consider applying for a maximum of 3 roles within 12 months to ensure you are not duplicating efforts.
Job Category
Enterprise Technology &amp; Infrastructure
Job Details
About Salesforce
Salesforce is the #1 AI CRM, where humans with agents drive customer success together. Here, ambition meets action. Tech meets trust. And innovation isn&rsquo;t a buzzword &mdash; it&rsquo;s a way of life. The world of work as we know it is changing and we're looking for Trailblazers who are passionate about bettering business and the world through AI, driving innovation, and keeping Salesforce's core values at the heart of it all.
Ready to level-up your career at the company leading workforce transformation in the agentic era? You&rsquo;re in the right place! Agentforce is the future of AI, and you are the future of Salesforce.
Digital Enterprise Technology (DET) connects people and technology to transform the future of work at Salesforce! Guided by our core values of Trust, Customer Success, Equality, Innovation, and Sustainability, we deliver business outcomes that fuel growth, drive competitive advantage, and empower our employees and customers globally.
DET's scope stretches beyond traditional IT. We are strategic partners, advocating for the best outcomes for our customers, always innovating, and helping to shape the future of work. DET oversees technology strategy, Salesforce on Salesforce, customer and partner enablement, applications engineering, infrastructure, collaboration, enterprise operations, architecture, and program enablement. DET is Customer Zero, the best example of Salesforce products delivered globally, at scale, sustainably.
As a Sr. Site Reliability Operations Engineer you'll be part of our internal DET Site Reliability Operations team supporting our employees globally. This role combines incident command, reliability engineering, and hands-on technical support. You'll lead response efforts for critical incidents while working with teams across different time zones.
Responsibilities
<ul><li>Lead incident response for high severity incidents affecting internal business operations. Serve as Incident Commander to coordinate technical teams, establish impact, and drive rapid service restoration.
</li><li>Monitor and troubleshoot enterprise systems including infrastructure, applications, and network components. Use your technical skills to diagnose complex problems across multiple platforms and vendors before they impact users.
</li><li>Prepare executive summaries and communicate incident status to leadership up to CDO level. Translate technical details into business language for stakeholders during and after incidents.
</li><li>Drive improvements to incident management processes by updating playbooks, creating SOPs, and leading automation initiatives. Mentor junior team members on handling escalated technical issues.
</li><li>Coordinate emergency changes and infrastructure updates to resolve incidents. Work with cross-functional teams to maintain business continuity during critical situations.
</li><li>Analyze incident data and KPI metrics to identify trends. Develop actionable recommendations to reduce impact duration and improve team performance.
</li><li>Participate in on-call rotation as part of regional coverage. Lead incident review meetings and ensure accurate documentation for post-incident analysis.
</li></ul>Required Experience
<ul><li>8+ years in IT operations, incident management, or site reliability work. Proven experience in a 24x7 high availability environment with enterprise systems.
</li><li>Demonstrated ability to lead high severity incident response under pressure. Establish impact, evaluate solutions with subject matter experts, and make decisions that balance technical and business needs.
</li><li>Excellent verbal and written communication skills for technical and executive audiences. Create clear incident updates, status reports, and executive summaries for leadership.
</li><li>Strong technical troubleshooting ability across Windows and Linux servers, networking, cloud platforms, and virtualization technologies. Diagnose problems quickly using logs, monitoring tools, and common diagnostic approaches.
</li><li>Experience leading or mentoring technical teams in incident response or operations roles.
</li><li>Experience with cloud platforms (e.g. AWS) and monitoring and logging tools (e.g. Splunk, Grafana, ELK stack).
</li><li>Suggest and design SLIs/SLOs to ensure reliability and performance of critical systems in alignment with SRE best practices
</li><li>ITILv4 certification and deep understanding of incident, problem, and change management processes.
</li><li>Industry certifications from public cloud platforms like AWS/Azure/Google, CCNA, RHCE or Microsoft associate
</li><li>A related technical degree required.
</li></ul>Preferred Qualifications
<ul><li>Salesforce platform experience and certifications.
</li><li>Additional advanced certifications like AWS SA, CCNP, RHCA
</li><li>Scripting ability in Python, Bash, PowerShell, or similar languages. Experience leading automation initiatives to reduce manual work.
</li><li>Advanced experience with monitoring and visualization tools like Splunk, Grafana, or Tableau. Proven ability to analyze data and present insights.
</li><li>Experience with automation tools like Puppet or Chef for infrastructure management.
</li></ul>Unleash Your Potential
When you join Salesforce, you&rsquo;ll be limitless in all areas of your life. Our benefits and resources support you to find balance and be your best , and our AI agents accelerate your impact so you can do your best . Together, we&rsquo;ll bring the power of Agentforce to organizations of all sizes and deliver amazing experiences that customers love. Apply today to not only shape the future &mdash; but to redefine what&rsquo;s possible &mdash; for yourself, for AI, and the world.
Accommodations
If you require assistance due to a disability applying for open positions please submit a request via this Accommodations Request Form .
Posting Statement
Salesforce is an equal opportunity employer and maintains a policy of non-discrimination with all employees and applicants for employment. What does that mean exactly? It means that at Salesforce, we believe in equality for all. And we believe we can lead the path to equality in part by creating a workplace that&rsquo;s inclusive, and free from discrimination. Know your rights: workplace discrimination is illegal. Any employee or potential employee will be assessed on the basis of merit, competence and qualifications &ndash; without regard to race, religion, color, national origin, sex, sexual orientation, gender expression or identity, transgender status, age, disability, veteran or marital status, political viewpoint, or other classifications protected by law. This policy applies to current and prospective employees, no matter where they are in their Salesforce employment journey. It also applies to recruiting, hiring, job assignment, compensation, promotion, benefits, training, assessment of job performance, discipline, termination, and everything in between. Recruiting, hiring, and promotion decisions at Salesforce are fair and based on merit. The same goes for compensation, benefits, promotions, transfers, reduction in workforce, recall, training, and education.
In the United States, compensation offered will be determined by factors such as location, job level, job-related knowledge, skills, and experience. Certain roles may be eligible for incentive compensation, equity, and benefits. Salesforce offers a variety of benefits to help you live well including: time off programs, medical, dental, vision, mental health support, paid parental leave, life and disability insurance, 401(k), and an employee stock purchasing program. More details about company benefits can be found at the following link: https://www.salesforcebenefits.com.
For Washington-based roles, the base salary hiring range for this position is $127,200 to $174,900.</div>

Sr. Site Reliability Operations Engineer

Search 10000+ Incident response engineer jobs near you this October. New roles added regularly across leading industries. Apply today.