incident response engineer

Concentrix

<div>We are seeking a Resiliency Engineer to lead advisory workshops for our clients with developing cloud architectures. The successful candidate will play a critical role in advising on and designing strategies that enhance the resilience of cloud environments. The focus is on concepts and practices including high availability, disaster recovery planning, business continuity planning, major incident response plans, and formal risk assessments.
Languages: French and English
Key Responsibilities:<ul>
<li>Lead advisory workshops to assist clients in building resilient cloud architectures.</li>
<li>Advise on strategies to improve system reliability and availability.</li>
<li>Develop and implement disaster recovery and business continuity plans.</li>
<li>Conduct formal risk assessments to identify potential vulnerabilities.</li>
<li>Design major incident response plans to mitigate and manage disruptions effectively.</li>
<li>Collaborate with client teams to understand their architectural needs and provide tailored solutions.</li>
<li>Educate clients on best practices for building resilient systems.</li>
</ul>Qualifications:<ul>
<li>A minimum of 3 years of experience in cloud resiliency engineering or related fields.</li>
<li>Demonstrated exposure to Site Reliability Engineering concepts.</li>
<li>Strong understanding of high availability, disaster recovery, and business continuity planning.</li>
<li>Experience in conducting risk assessments and developing incident response plans.</li>
<li>Ability to communicate complex technical concepts to non-technical stakeholders.</li>
<li>Excellent interpersonal and communication skills, with the ability to lead workshops and engage with diverse client teams.</li></ul></div>

Cloud Resiliency Architect with English and Arabic

NATIONAL ELECTRICITY & WATER CONSTRUCTIONS WLL

OT/ICS Cybersecurity Operations Continuity Engineer<ul><li>Monitor OT/ICS security events and incidents</li><li>Support incident response and system recovery activities</li><li>Ensure continuity of critical operations during cyber incidents</li><li>Coordinate with SOC, IT, and operations teams</li><li>Maintain incident logs, response plans, and reports</li></ul>Work Location: In person

OT/ICS Cybersecurity Operations Continuity Engineer

TEEMA

<div>We are seeking a Cyber Security Engineer II to support and enhance Operations Center capabilities through a blend of hands-on operations and research-driven innovation. This role is ideal for a cybersecurity professional who thrives in a fast-paced environment, combining incident response expertise with forward-looking security engineering.
In this position, you will support daily SOC operations by monitoring, analyzing, and responding to security events and threats. You will lead and contribute to incident response efforts, including investigation, containment, and remediation, while also conducting research to strengthen cyber defense strategies. This role plays a key part in developing and improving security tools, processes, and best practices to proactively mitigate risks.
You will collaborate with cross-functional teams to enhance the overall security posture and deliver actionable recommendations. Strong documentation skills are essential, as you will be responsible for producing reports, analysis, and risk mitigation strategies.
Qualifications: 
Bachelor&rsquo;s degree in Cybersecurity, IT, Computer Science, or related field, or equivalent experience (3+ years in security engineering/operations and 4+ years in incident response). Active or ability to obtain a SECRET clearance is required.
Certifications: 
CISSP (ISC2), CISM, and CEH (or approved equivalents) are required and must be maintained.
Preferred Experience: 
Background in federal or government SOC environments, along with experience using SIEM platforms, intrusion detection systems, and endpoint security tools. Strong analytical, problem-solving, and communication skills are essential.
#Workwolf</div>

Cyber Security Engineer

Magnet

<div>
 
 
 Employer Overview
 
 
 
 A national-scale private cloud platform provides secure and reliable IT services across multiple subsidiaries. The platform delivers multi-tenant, high-availability infrastructure with integrated monitoring, security, and compliance, ensuring threat detection, operational health, and regulatory alignment across hybrid environments.
 
 
 
 
 
 
 Job Summary
 
 
 
 The SOC &amp; NOC Engineer is responsible for monitoring, securing, and maintaining the operational health of the private cloud platform. The role ensures
 
 real-time threat detection, incident response, vulnerability management, and compliance adherence
 
 , supporting high availability and continuous service performance.
 
 
 
 
 
 
 Key Responsibilities
 
 
 <ul>
 <li>
 Monitor infrastructure, applications, and security events using SIEM and monitoring tools
 </li>
 <li>
 Analyze and respond to security alerts, incidents, and anomalies
 </li>
 <li>
 Perform vulnerability assessments and coordinate remediation activities
 </li>
 <li>
 Manage patch compliance and security assurance processes
 </li>
 <li>
 Operate and maintain SIEM/SOAR platforms (Elastic Stack, Splunk, or similar)
 </li>
 <li>
 Provide Tier-1 and Tier-2 support for infrastructure and security incidents
 </li>
 <li>
 Escalate critical issues to engineering teams and track resolution
 </li>
 <li>
 Support audit, compliance, and reporting requirements
 </li>
 <li>
 Participate in incident response and threat hunting activities
 </li>
 </ul>
 
 
 
 
 
 Requirements
 
 
 <ul>
 <li>
 Bachelor&rsquo;s degree or Diploma in Cybersecurity, IT, Networks, or a related field (preferred)
 </li>
 <li>
 3&ndash;7 years in SOC, NOC, or security operations roles
 </li>
 <li>
 Experience in enterprise or cloud environments preferred
 </li>
 <li>
 Strong log analysis, troubleshooting, and basic networking knowledge
 </li>
 <li>
 Strong analytical and problem-solving abilities
 </li>
 <li>
 Excellent communication and collaboration skills
 </li>
 <li>
 Detail-oriented with a proactive security mindset
 </li>
 <li>
 Ability to work independently and in cross-functional teams
 </li>
 <li>
 SIEM platforms: Elastic, Splunk, or similar
 </li>
 <li>
 Monitoring tools: APM, infrastructure monitoring, logging
 </li>
 <li>
 Vulnerability scanning tools: Tenable or similar
 </li>
 <li>
 Security operations, incident response, and threat analysis
 </li>
 <li>
 Patch management and compliance frameworks
 </li>
 <li>
 Basic networking knowledge: TCP/IP, routing, firewalls
 </li>
 <li>
 Proficiency with security monitoring, incident tracking, and reporting tools
 </li>
 <li>
 Familiarity with hybrid and multi-site cloud environments
 </li>
 <li>
 Fluency in English (written and spoken)
 </li>
 <li>
 Arabic is a plus
 </li>
 <li>
 Ability to maintain 24x7 platform monitoring and availability
 </li>
 <li>
 Capacity to perform real-time incident response and escalation
 </li>
 <li>
 Ability to coordinate vulnerability remediation and compliance processes
 </li>
 <li>
 Capability to support Tier-1/Tier-2 SOC/NOC operations and reporting
 </li>
 <li>
 CompTIA Security+
 </li>
 <li>
 Certified SOC Analyst (CSA) or equivalent
 </li>
 <li>
 Tenable certification (if applicable)
 </li>
 <li>
 ITIL Foundation
 </li>
 </ul>
</div>

SOC & NOC Engineer (Security Monitoring & Compliance)

Heartland Business Systems

<div>Description:

Position Summary:
This role will provide security Incident Response (IR) services for our customers. IR activities would include all aspects of analysis, containment, eradication, and recovery, and would entail actions such as log reviews, malware analysis, evidence collection, and other forensic activities that are part of a cybersecurity incident investigation.
This role will also advise on and deploy security technical solutions as well as perform internal and external oriented security assessments. These assessments range from deep technical security assessments, social engineering, broad-based risk, and security posture assessments. These assessments and services may be performed as individual projects or in a virtual Security Engineer (vSE) role. Additionally, this role will work with the Practice Manager &ndash; Digital Forensics &amp; Incident Response to identify and develop new technical cybersecurity offerings.
Roles and Responsibilities/ Essential Functions:<ul><li>
Work as a member of the HBS Cybersecurity team that provides consultative and proactive security related support to Heartland&rsquo;s account base.</li><li>
Lead Incident Response cases from beginning to end, providing consulting and remediation efforts.</li><li>
Perform forensic analysis to identify systems artifacts which can be used as evidence of the &ldquo;who, what, when, where, and how&rdquo; during cybersecurity incident response activities or digital investigations.</li><li>
Serve as a Virtual Security Engineer (vSE) for customers.</li><li>
Obtain knowledge on other technologies, as directed by customer demand.</li><li>
Effectively present and explain security solutions to customers.</li><li>
Provide sales consultants and fellow Engineers with design assistance, review, validation, and optimization of security technologies and solutions.</li><li>
Contribute to product selection and research, configuration standards and best practices and educate our sales teams on these products and services so that they can sell them.</li><li>
Ability to work in a team atmosphere as both a leader and contributor, as assigned. Always maintaining a professional and respectful demeanor.</li><li>
Cross-training/Mentoring of other HBS employees.</li><li>
Participate in on-call to support the 24x7 IR services.</li><li>
Minimum of 1,350 hours billed per fiscal year prorated based on start date. These charge hour requirements will be balanced against professional development and on the job training.</li></ul>
Requirements:

Competencies<ul><li>
Accountability - Ability to accept responsibility and account for his/her actions.</li><li>
Active Listening - Ability to actively attend to, convey, and understand the questions of others.</li><li>
Adaptability - Ability to adapt to change in the workplace.</li><li>
Communication - Oral and Written - Ability to communicate effectively with others.</li><li>
Customer Oriented - Ability to take care of the customers&rsquo; needs while following company policy.</li><li>
Decision Making - Ability to make critical decisions while following company procedures.</li><li>
Problem Solving - Ability to find a solution for or to deal proactively with work-related problems.</li><li>
Working Under Pressure - Ability to complete assigned tasks during stressful situations.</li><li>
Independence &ndash; Ability to work on your own to drive the desired results on assigned work.</li></ul>
Required Experience:<ul><li>
8+ years of related IT experience</li><li>
3+ years of AD and Azure experience</li></ul>
Preferred Experience:<ul><li>
2+ years of experience handling and leading IR</li><li>
Experience with Digital Forensic handling and analysis</li><li>
Experience with Threat Hunting and analysis</li><li>
Experience with Active Directory specifically domain recovery</li><li>
Experience with Configuration on various firewall vendors and VPN</li><li>
Experience with Office 365 and Exchange</li><li>
Experience with Virtualization concepts and technologies (VMWare, Hyper-V)</li><li>
Experience with Data Center Operations (Networking, SAN/NAS, Servers)</li></ul>
Required Skills, Education and/ or Certifications:<ul><li>
Bachelor&rsquo;s degree or equivalent experience</li></ul>
Preferred Skills, Education and/ or Certifications:<ul><li>
CEH and/or CHFI or current industry standard certifications in areas of security expertise</li></ul>
Equal Opportunity Employer - Including Disabled and Veterans
#HBS</div>

Senior Information Security Engineer

MERCOR

<div><h2 class="jobSectionHeader">About the Role</h2>
You&rsquo;ll work on security across a platform that processes large volumes of sensitive data, including AI training pipelines, expert payments, and enterprise integrations. This is a hands-on engineering role focused on building and improving the systems that keep Mercor secure.
We use AI heavily in our own security work. You should be comfortable building alongside AI code-gen tools, using LLMs to accelerate threat analysis, and automating away the repetitive work that slows security teams down. If you're the kind of engineer who writes a script instead of filing a ticket, you'll fit in here.
We're in-person five days a week at our San Francisco headquarters, with first Fridays remote. New York could be an option for the right candidate.<h2 class="jobSectionHeader">
What You'll Build:</h2><ul><li>
Detection and response pipelines that catch real threats, not checkbox alerts</li><li>
Security automation that replaces manual processes - if you're doing something twice, automate it</li><li>
Infrastructure hardening across AWS, Kubernetes, and our production environment</li><li>
Identity and access controls for a platform serving 300K+ experts and enterprise clients</li><li>
Application security tooling integrated into CI/CD - shifting security left without slowing down deploys</li><li>
Incident response runbooks and tooling - when something breaks, you'll own the fix end-to-end</li></ul><h2 class="jobSectionHeader">
What We're Looking For</h2><ul><li>
You've built security tooling or automation in a previous role - not just operated existing tools</li><li>
Strong in Python, Go, or TypeScript - you ship code, not slide decks</li><li>
Experience hardening cloud infrastructure (AWS preferred) - VPCs, IAM, container security</li><li>
You understand application security at the code level - can review a PR for auth bugs, not just run a scanner</li><li>
Comfortable with detection engineering - writing rules, tuning alerts, reducing noise</li><li>
You've done incident response and know what it means to be on-call when things break</li><li>
5+ years of professional experience in security engineering, software engineering, or a related builder role</li></ul><h2 class="jobSectionHeader">
Bonus Points</h2><ul><li>
Experience at a high-growth startup or fast-moving engineering org</li><li>
Familiarity with AI/ML security - model access controls, training data protection, prompt injection</li><li>
Offensive security skills - pen testing, bug bounty, red team experience</li><li>
Contributions to open source security tools</li><li>
You've built something from scratch that a team still uses</li></ul><h2 class="jobSectionHeader">
Why Mercor</h2><ul><li>
Build, don't babysit. We automate the boring stuff. You'll spend your time building systems, not reviewing access requests.</li><li>
AI-native security. You'll use frontier AI tools daily - for code review, threat analysis, detection writing, and anything that benefits from an AI co-pilot.</li><li>
Ownership from day one. You'll own meaningful security surface area, not a single dashboard.</li><li>
See the future early. Working alongside AI labs means you'll understand frontier model capabilities months before the market.</li></ul>
Compensation Range: $130K - $500K</div>

Security Engineer

99 Technologies

Junior Production Support EngineerDepartment: Software Engineering / OperationsLocation: Bahria Town, Islamabad.Role OverviewI am seeking a proactive and detail-oriented Junior Production Support Engineer to support our shipping and fulfillment platform. This role combines L1 responsibilities (incident response, monitoring, user communication) with L2 responsibilities (technical troubleshooting and log analysis).The selected candidate will act as the first line of defense for production issues, ensuring smooth order processing, accurate shipping label generation, and reliable integrations with carriers and third-party platforms.Key ResponsibilitiesMonitor production systems and respond promptly to incidents impacting order processing and shipping workflowsServe as the primary point of contact for customer-reported issuesTroubleshoot issues related to order ingestion, carrier integrations, shipping rates, and label generationAnalyze logs, API requests/responses, and system behavior to identify root causesInvestigate and resolve integration-related issuesCommunicate clearly and professionally with customers and internal teams during incidentsEscalate complex issues to engineering teams with proper context and analysisMaintain documentation, runbooks, and incident reportsContinuously improve monitoring processes and support workflowsRequired Skills &amp; Qualifications0&ndash;1 year of experience in production support or technical supportBasic understanding of SaaS platforms and APIs (REST, webhooks)Familiarity with SQL, log analysis, and HTTP debugging tools (Postman, curl)Strong analytical and problem-solving skillsClear and professional communication skillsNice to HaveExposure to eCommerce or shipping/logistics platformsFamiliarity with carrier APIs (e.g., FedEx, UPS, USPS)Experience with monitoring toolsUnderstanding of queues and background job processingExperience with ticketing systems such as JiraEducationBachelor&rsquo;s degree in Computer Science, Information Technology, or a related fieldWork Location: In person

Junior Production Support Engineer

Search 10000+ Incident response engineer jobs near you this April. New roles added regularly across leading industries. Apply today.