incident response engineer

BairesDev

<div>
 
 At BairesDev&reg;, we've been leading the way in technology projects for over 15 years. We deliver cutting-edge solutions to giants like Google and the most innovative startups in Silicon Valley.
 
 
 
 
 
 Our diverse 4,000+ team, composed of the world's Top 1% of tech talent, works remotely on roles that drive significant impact worldwide.
 
 
 
 
 
 When you apply for this position, you're taking the first step in a process that goes beyond the ordinary. We aim to align your passions and skills with our vacancies, setting you on a path to exceptional career development and success.
 
 
 
 
 
 Java Technical Support Engineer at BairesDev
 
 
 
 
 
 We are seeking a Java Technical Support Engineer to join our Incident Response Team. You'll monitor applications, resolve issues, and help maintain our Java-based systems. This welcoming role offers opportunities for professionals at various experience levels who are passionate about Java and technical support.
 
 
 
 
 
 What You'll Do:
 
 
 
 
 
 - Provide technical support coverage during business hours.
 
 
 - Monitor system performance and respond to alerts.
 
 
 - Troubleshoot and resolve issues in Java applications.
 
 
 - Document incidents and solutions for knowledge sharing.
 
 
 - Collaborate with development teams on improvements.
 
 
 - Participate in process enhancement initiatives.
 
 
 
 
 
 What we are looking for:
 
 
 
 
 
 - Experience with Java development and troubleshooting.
 
 
 - Familiarity with support roles and incident response.
 
 
 - Problem-solving and analytical thinking skills.
 
 
 - Good communication abilities.
 
 
 - Advanced level of English.
 
 
 
 
 
 How we do make your work (and your life) easier:
 
 
 
 
 
 - 100% remote work (from anywhere).
 
 
 - Excellent compensation in USD or your local currency if preferred
 
 
 - Hardware and software setup for you to work from home.
 
 
 - Flexible hours: create your own schedule.
 
 
 - Paid parental leaves, vacations, and national holidays.
 
 
 - Innovative and multicultural work environment: collaborate and learn from the global Top 1% of talent.
 
 
 - Supportive environment with mentorship, promotions, skill development, and diverse growth opportunities.
 
 
 
 
 
 Apply now and become part of a global team where your unique talents can truly thrive!
 
</div>

Java Technical Support Engineer - Remote Work

Alpheya

<div>We are a B2B WealthTech startup based in Abu Dhabi and backed by BNY Mellon (America&rsquo;s oldest bank and first company to list on NYSE) and Lunate (a new $50B AUM alternative asset management firm based in Abu Dhabi, UAE). The company has raised $300M to build a state of the art wealth technology platform.
Our mission is to power and grow our clients&rsquo; Wealth franchises through differentiated experiences, financial solutions, and insights. Our digital wealth management platform- will enable banks and other financial institutions in the Middle East to grow and further penetrate affluent, HNW and UHNW investor segments.
While still leveraging the capabilities and knowledge of large organizations, our fintech is a startup with truly cross-functional and agile teams.
For more information, please visit www.alpheya.com
Role
We're building a team that owns production incident response, deep debugging, and permanent fixes across application, data, and deployment layers.
This is not a tickets-only ops role. You will write code, ship fixes safely, and harden the platform so issues don't repeat.
Note: This is a software engineering role with real production ownership. You&rsquo;ll combine engineering and operations to own outcomes end-to-end: investigate incidents, ship code fixes, and prevent repeat issues through tests, observability, and hardening.<ul>
<li>
Lead and execute production incident response: triage, mitigation, stakeholder communication, and coordination across teams</li>
<li>Debug and fix issues across Go services (mandatory) and the broader stack (Node.js services where relevant)</li>
<li>Work across service boundaries: GraphQL/RPC, distributed tracing, dependency failures, performance bottlenecks, and safe degradation patterns</li>
<li>Troubleshoot Kubernetes workloads and deployments</li>
<li>Diagnose PostgreSQL/CNPG issues</li>
<li>Handle production bugs that span application + data pipelines (ETL/Snowflake mappings), including backfills/replays and data-quality validation</li>
<li>Build prevention: add regression tests, improve observability , and maintain runbooks/service passports</li>
<li>Drive reliability improvements: SLOs/SLIs, alert quality, release readiness checks, and operational standards across teams</li>
</ul>
Requirements<ul>
<li>
7+ years in SRE / Production Engineering / Platform Engineering (reliability-focused)</li>
<li>Strong Go (mandatory): ability to read, debug, and ship production fixes in Go codebases</li>
<li>Proven experience debugging distributed systems in production (latency, error rates, timeouts, retries, cascading failures)</li>
<li>Strong hands-on experience with Kubernetes in production environments</li>
<li>Experience with Helm and GitOps workflows (FluxCD preferred; ArgoCD acceptable)</li>
<li>Solid PostgreSQL troubleshooting experience (performance, incident patterns, migrations)</li>
<li>Observability experience (metrics/logging/tracing; Datadog/Grafana/Tempo/Loki experience is a plus)</li>
<li>Strong incident leadership: calm under pressure, clear communication, structured problem-solving</li>
<li>Engineering hygiene: PR discipline, reviews, testing mindset, safe rollouts/rollbacks</li>
<li>Comfortable with IAM/security fundamentals in real production systems: OAuth2/OIDC basics, RBAC/least privilege, and safe secrets handling</li>
</ul>
Good to Have<ul>
<li>
Node.js backend experience in production</li>
<li>Experience in FinTech / regulated environments / high-availability systems (auditability, change control, incident rigor)</li>
<li>Data reliability experience: ETL monitoring, reconciliation, Snowflake operations, schema/mapping drift handling</li>
<li>Reliability patterns common to trading/fintech platforms: correctness and data integrity mindset (idempotency, reconciliation), resilient partner integrations, and strong observability for critical user journeys</li></ul></div>

Senior Software Engineer - SRE Focused

United Sol (Pvt.) Ltd

Research, analyze, and reverse-engineer malicious code to produce detections, mitigation guidance, and threat intelligence for enterprise protection.Responsibilities<ul><li>Analyze samples (static/dynamic) to determine behavior, persistence, and indicators of compromise.</li><li>Develop signatures, YARA rules, and detection content for endpoint and network tools.</li><li>Produce concise technical reports and IOC packages for incident response teams.</li><li>Feed findings into threat intelligence and help improve defensive controls.</li></ul>Required<ul><li>3+ years in malware analysis, incident response, or threat research.</li><li>Comfortable with reverse-engineering tools and analysis workflows (no requirement to author malicious tools).</li><li>Strong Windows and/or Linux internals knowledge and scripting ability (Python, PowerShell, etc.).</li><li>Degree in relevant field or equivalent experience.</li></ul>Desired<ul><li>Experience with sandboxing platforms, YARA, and public threat intelligence platforms.</li><li>Certification such as GIAC Reverse Engineering Malware (GREM) is a plus.</li></ul>EthicsRole is strictly defensively focused; all analysis conducted for protection, detection, and lawful response.Job Type: Full-timeWork Location: In person

Malware Research & Defensive Analyst (Reverse Engineering)

Charterhouse Middle East

<div>
 
 
 Competitive Salary, Plus Family Benefits
 
 
 
 
 
 
 Charterhouse is working with a Family Office based in Abu Dhabi that is seeking to hire a Security Engineer to join their Product Support &amp; Design Division. This is a unique opportunity to work in a forward-thinking, innovation-led environment and play a critical role in securing cutting-edge digital platforms.
 
 
 
 
 
 The Security Engineer will be responsible for securing cloud environments (AWS preferred) and containerized workloads, embedding security into Git-based CI/CD pipelines, and hardening Linux systems. The role includes designing and operating layered cloud security, implementing secure patterns for orchestration, and governing software supply chain integrity through artifact and package controls.
 
 
 
 
 
 This role will also integrate automated vulnerability checks across the SDLC, manage incident response including root-cause analysis and forensics, and build telemetry pipelines feeding SIEM for actionable detection and alerting.
 
 
 
 
 
 Additional responsibilities involve defining secure-by-default architectures, enforcing policy guardrails, conducting security trainings, and enabling developer teams with practical secure coding guidance. The Security Engineer will configure and optimize WAF/CDN protections, enforce software supply chain integrity through artifact governance and SBOMs, and develop DevSecOps automation to embed security checks and guardrails into pipelines.
 
 
 
 
 
 The ideal Security Engineer will have a Bachelor&rsquo;s degree in Computer Science, Information Security, or equivalent experience, and at least three years of experience in security engineering, application security, or DevSecOps delivering engineered controls at scale.
 
 
 
 
 
 Candidates must demonstrate proficiency in at least one modern scripting or programming language for automation and integrations, experience operating CI/CD and infrastructure as code with security controls baked into pipelines, and hands-on practice with SIEM, detection engineering, vulnerability assessment, and incident response.
 
 
 
 
 
 Familiarity with industry security frameworks and benchmarks, as well as an understanding of LLM security basics, is essential. Relevant certifications such as AWS Certified Security Specialty, OSCP or OSWE, CKS, and GIAC GCSA, GCIA or GCIH certifications are strongly preferred.
 
</div>

DevSecOps Engineer

ACWA Power

<div>
 
 The Incident Response &amp; Forensics Manager (IT &amp; OT) is responsible for managing and leading the organization's incident response and forensic investigation efforts across both Information Technology (IT) and Operational Technology (OT) environments. This role ensures that security incidents are promptly detected, contained, investigated, and remediated, while also overseeing the collection and analysis of forensic evidence. The manager coordinates across multiple teams to enhance the organization&rsquo;s ability to respond to cyber incidents, minimize damage, and prevent future security breaches within both IT and OT domains.
 
 
 
 
 
 
 KEY ACCOUNTABILITIES:
 
 
 
 
 
 
 
 Incident Response Management (IT &amp; OT):
 
 
 
 
 
 <ul>
 <li>
 Lead and manage the organization's incident response efforts across both IT and OT systems, ensuring rapid detection, containment, and resolution of security incidents.
 </li>
 <li>
 Develop and maintain incident response playbooks, ensuring that they address specific threats to both IT and OT environments.
 </li>
 <li>
 Coordinate with internal teams and external stakeholders to ensure effective communication and collaboration during incident response efforts.
 </li>
 <li>
 Oversee the triage, prioritization, and escalation of security incidents, ensuring that critical threats are addressed in a timely manner.
 </li>
 <li>
 Provide incident response support to both IT and OT infrastructure teams, advising on containment actions and recovery steps.
 </li>
 <li>
 Offer remediation guidance including configuration changes and preventive measures to minimize future threats in both IT and OT systems.
 </li>
 <li>
 Triage alerts from detection platforms, identifying and removing false positives across IT and OT environments.
 </li>
 <li>
 Escalate genuine threats and security incidents to the appropriate teams for further investigation and remediation, ensuring timely and accurate response to both IT-based and OT-based threats.
 </li>
 </ul>
 
 
 
 
 
 Forensic Investigation (IT &amp; OT):
 
 
 
 
 
 <ul>
 <li>
 Lead digital forensic investigations within both IT and OT systems to determine the root cause of security incidents, ensuring the proper collection, preservation, and analysis of digital evidence.
 </li>
 <li>
 Utilize forensic tools and techniques to investigate compromised systems, networks, and devices across IT and OT infrastructures.
 </li>
 <li>
 Ensure that forensic processes adhere to legal and regulatory requirements, and that evidence is documented in a formal and defensible manner for potential legal proceedings.
 </li>
 </ul>
 
 
 
 
 
 Threat Detection &amp; Analysis (IT &amp; OT):
 
 
 
 
 
 <ul>
 <li>
 Conduct continuous monitoring of security events across both IT and OT environments using SIEM, XDR, and other Threat Detection, Investigation, and Response (TDIR) platforms.
 </li>
 <li>
 Analyze telemetry from multiple sources (network traffic, endpoints, OT systems, etc.) to detect and investigate potential cyber threats, ensuring comprehensive coverage across both digital and physical systems.
 </li>
 <li>
 Monitor and analyze security events from various sources&mdash;including SIEM, intrusion detection/prevention systems (IDS/IPS), firewalls, endpoint detection systems, and OT-specific monitoring tools&mdash;to identify potential threats and vulnerabilities.
 </li>
 <li>
 Lead efforts to correlate security information from both IT and OT environments to identify patterns of anomalous behavior and mitigate potential threats.
 </li>
 </ul>
 
 
 
 
 
 Incident Reporting &amp; Documentation:
 
 
 
 
 
 <ul>
 <li>
 Document formal technical incident reports for consumption by IT and OT infrastructure teams and senior leadership, providing detailed information on root causes, affected systems, and next steps.
 </li>
 <li>
 Ensure clear and concise communication of incident details to both IT and OT stakeholders, enabling effective decision-making during and after incidents.
 </li>
 <li>
 Ensure accurate and detailed documentation of all security incidents, including timelines, actions taken, and outcomes, for post-incident reviews and compliance reporting.
 </li>
 <li>
 Prepare formal incident reports and technical summaries for senior management, internal stakeholders, and regulatory authorities as required.
 </li>
 <li>
 Conduct post-incident reviews and lessons learned sessions to identify opportunities for improvement in incident response procedures for both IT and OT environments.
 </li>
 </ul>
 
 
 
 
 
 Collaboration &amp; Coordination:
 
 
 
 
 
 <ul>
 <li>
 Work closely with threat hunting teams to optimize TDIR capabilities by incorporating findings from threat hunting activities in both IT and OT environments.
 </li>
 <li>
 Continuously improve detection and response strategies based on real-world threat activity affecting both IT networks and OT systems.
 </li>
 <li>
 Collaborate with IT engineering, OT operations, cybersecurity teams, and third-party vendors to coordinate response efforts and ensure that both IT and OT systems are fully protected during and after an incident.
 </li>
 <li>
 Work closely with threat intelligence teams to stay updated on emerging threats to both IT and OT systems and ensure that the organization&rsquo;s incident response strategy remains current and effective.
 </li>
 <li>
 Provide incident response support to both IT and OT infrastructure teams, advising on containment actions and recovery steps.
 </li>
 <li>
 Offer remediation guidance including configuration changes and preventive measures to minimize future threats in both IT and OT systems.
 </li>
 </ul>
 
 
 
 
 
 Incident Response Training &amp; Drills:
 
 
 
 
 
 <ul>
 <li>
 Develop and conduct regular incident response simulations and training exercises across both IT and OT teams to ensure readiness for real-world cyber incidents.
 </li>
 <li>
 Ensure that all relevant personnel are trained in their roles during an incident and are familiar with the incident response plan for both IT and OT systems.
 </li>
 </ul>
 
 
 
 
 
 Detection Platform Enhancement (IT &amp; OT):
 
 
 
 
 
 <ul>
 <li>
 Work with threat detection content development teams to fine-tune detection platforms and create new detection rules tailored to the unique needs of both IT and OT environments.
 </li>
 <li>
 Continuously enhance detection capabilities to improve alert accuracy and reduce false positives in both IT systems (e.g., endpoints, networks) and OT systems (e.g., SCADA, ICS).
 </li>
 </ul>
 
 
 
 
 
 Root Cause Analysis &amp; Prevention (IT &amp; OT):
 
 
 
 
 
 <ul>
 <li>
 Conduct in-depth root cause analysis of security incidents across IT and OT systems, identifying vulnerabilities, misconfigurations, or other weaknesses.
 </li>
 <li>
 Provide recommendations for mitigating future risks, including configuration changes and security controls for both IT infrastructure and OT control systems.
 </li>
 </ul>
 
 
 
 
 
 Policy Development &amp; Incident Response Governance
 
 :
 
 
 
 
 <ul>
 <li>
 Assist in the development and refinement of incident response policies, forensic procedures, and security standards for both IT and OT environments.
 </li>
 <li>
 Ensure that incident response efforts comply with relevant regulatory requirements and industry best practices for both IT and OT sectors.
 </li>
 </ul>
 
 
 
 
 
 compliance &amp; Performance Reporting (IT &amp; OT):
 
 
 
 
 
 <ul>
 <li>
 Support the development and execution of compliance reporting for both IT and OT teams, ensuring that security incidents and responses are documented in line with organizational and regulatory requirements.
 </li>
 <li>
 Provide SOC performance reporting to ensure key metrics and Service Level Agreements (SLAs) are met for both IT and OT operations.
 </li>
 </ul>
 
 
 
 
 
 Vulnerability &amp; Exposure Analysis (IT &amp; OT):
 
 
 
 
 
 <ul>
 <li>
 Conduct analysis and testing to identify vulnerabilities, misconfigurations, and other exposures across both IT and OT environments.
 </li>
 <li>
 Validate user policies, configurations, and access controls to ensure they align with the security posture of both IT and OT systems, maintaining a holistic security approach.
 </li>
 <li>
 Efficiency &amp; SLA Adherence (IT &amp; OT):
 </li>
 <li>
 Work efficiently to meet SOC metrics and SLAs, ensuring timely and effective response to incidents affecting both IT infrastructure and OT control systems.
 </li>
 </ul>
 
 
 
 
 
 QUALIFICATIONS:
 
 
 
 
 
 <ul>
 <li>
 Bachelor&rsquo;s degree in Cybersecurity, Information Technology, Computer Science, or a related field (Master's preferred).
 </li>
 <li>
 5+ years of experience in incident response, digital forensics, or cybersecurity operations, with at least 2 years focusing on OT environments.
 </li>
 <li>
 Proficiency in incident response tools, forensic tools, and SIEM platforms (e.g., Splunk, ELK, QRadar).
 </li>
 <li>
 Experience with both IT and OT-specific security platforms (e.g., SCADA, ICS, PLC systems).
 </li>
 <li>
 Knowledge of forensic analysis techniques across networks, endpoints, and OT systems.
 </li>
 <li>
 Familiarity with threat intelligence, malware analysis, and vulnerability management for both IT and OT infrastructures.
 </li>
 </ul>
 
 
</div>

Incident Response & Forensics Manager (IT & OT)

Themesoft Inc.

<div>
 
 Greetings from Themesoft!
 
 
 
 
 
 We&rsquo;re looking for a skilled and proactive
 
 Network Operations Engineer
 
 to join our growing IT infrastructure team. This role involves
 
 real-time monitoring, incident response, coordination
 
 , and maintaining the health of enterprise network systems.
 
 
 
 
 
 
 Location:
 
 Bangalore
 
 
 
 Experience:
 
 6&ndash;9 Years
 
 
 
 Notice Period:
 
 Immediate Joiner or 10 days of notice period Only
 
 
 
 
 
 
 Key Responsibilities:
 
 
 
 🔹
 
 Monitoring &amp; Incident Response
 
 
 <ul>
 <li>
 Continuously monitor network infrastructure using enterprise tools
 </li>
 <li>
 Respond to alerts and incidents as per SLA
 </li>
 <li>
 Perform root cause identification and document repeat issues
 </li>
 </ul>
 
 🔹
 
 Escalation &amp; Coordination
 
 
 <ul>
 <li>
 Escalate complex issues to L2/L3 teams
 </li>
 <li>
 Coordinate with internal teams, vendors, and service providers
 </li>
 </ul>
 
 🔹
 
 Operational Health Checks
 
 
 <ul>
 <li>
 Execute routine health checks on routers, switches, firewalls, wireless controllers
 </li>
 <li>
 Record and report network anomalies
 </li>
 </ul>
 
 🔹
 
 Documentation &amp; Compliance
 
 
 <ul>
 <li>
 Maintain records in
 
 ITSM tools
 
 (ServiceNow, Remedy)
 </li>
 <li>
 Update runbooks, SOPs, and KBs regularly
 </li>
 <li>
 Ensure adherence to compliance and security standards
 </li>
 </ul>
 
 
 
 
 ✅
 
 Required Skills &amp; Experience:
 
 
 <ul>
 <li>
 6&ndash;9 years in Network Operations or NOC environments
 </li>
 <li>
 Strong knowledge of
 
 TCP/IP, VLANs, Routing &amp; Switching
 
 </li>
 <li>
 Hands-on experience with
 
 Cisco/Juniper
 
 devices
 </li>
 <li>
 Familiarity with
 
 monitoring &amp; ticketing tools
 
 </li>
 <li>
 Basic troubleshooting of
 
 VPNs, firewalls, wireless APs
 
 </li>
 <li>
 Excellent communication &amp; coordination skills
 </li>
 </ul>
 
 
 
 
 If you're available to join
 
 immediately
 
 or
 
 within 10 days
 
 , and if you are interested, please share updated resume with mythili@themesoft.com
 
 
 
 
 
 #NetworkJobs #NOC #NetworkOperations #CiscoJobs #ITSupport #BangaloreJobs #TechJobs #ImmediateJoiners #HiringNow #NetworkEngineer #Firewalls #RoutingSwitching #NetworkMonitoring #ServiceNow #Remedy #JobOpening #ITInfrastructure #SeniorAssociate #LinkedInJobs
 
</div>

Senior Network Operations Engineer

Search 8478+ Incident response engineer jobs near you this January. New roles added regularly across leading industries. Apply today.

8478 incident response engineer jobs NEAR_ME

Java Technical Support Engineer - Remote Work

Java Technical Support Engineer - Remote Work

Senior Software Engineer - SRE Focused

Malware Research & Defensive Analyst (Reverse Engineering)

DevSecOps Engineer

Incident Response & Forensics Manager (IT & OT)

Senior Network Operations Engineer