incident response specialist

Madre Integrated Engineering

We are seeking a Cybersecurity Incident Response Specialist to manage and respond to security incidents across the organization. The role focuses on detecting threats, analyzing security events, and executing effective response strategies to protect systems, data, and infrastructure.Key Responsibilities:<ul><li>Identify, analyze, and respond to security incidents and unauthorized access attempts in real-time.</li><li>Lead containment and eradication efforts to minimize the impact of cyber threats.</li><li>Conduct threat hunting and proactive security monitoring.</li><li>Prepare detailed technical reports and provide actionable security recommendations.</li><li>Investigate security incidents including malware infections, phishing attacks, unauthorized access, and data breaches.</li><li>Lead incident response lifecycle: detection, analysis, containment, eradication, and recovery.</li><li>Perform digital forensics and root cause analysis to prevent recurrence.</li><li>Develop and maintain incident response playbooks and procedures.</li><li>Collaborate with SOC, IT, and network teams for coordinated response.</li></ul>Requirements:<ul><li>Should have relevant experience in IT infrastructures or network security.</li><li>Candidates with OSCP, CRTO, GCTI, CISSP, or CISM certifications are preferred .</li><li>Knowledge of frameworks such as NIST, MITRE ATT&amp;CK, and ISO 27001.</li><li>Experience in network security, endpoint security, and incident investigation.</li><li>Familiarity with scripting (Python, PowerShell, or Bash) is an advantage.</li><li>Relevant certifications such as CEH, GCIH, CISSP, or similar are preferred.</li><li>Strong analytical, problem-solving, and communication skills.</li><li>Ability to work in a fast-paced environment and handle critical incidents.</li></ul>Location: QatarJob Type: Full-timeWork Location: On the road

Cybersecurity Incident Response Specialist

VaporVM

<div><div><div>Date Posted:</div>
03 April, 2026</div>
<div><div>Industry:</div>
IT Services and IT Consulting</div>
<div><div>Location:</div>
VaporVM</div></div>
 <div><h2 class="jobSectionHeader">Job Description:</h2>
<div><h3 class="jobSectionHeader">Job Role Description</h3>

Handling, analyzing, and responding to cybersecurity incidents.
<h3 class="jobSectionHeader">
Responsibilities</h3>
<ul><li>Perform incident response activities, including forensic evidence collection, intrusion correlation, tracking, threat analysis, and system remediation.
</li><li>Analyze logs from multiple sources to identify potential network security threats.
</li><li>Assess incident priorities to determine vulnerabilities, scope, urgency, and potential impact, and provide recommendations for rapid remediation.
</li><li>Correlate incident data to identify vulnerabilities.
</li><li>Analyze cybersecurity defense trends and prepare reports.
</li><li>Conduct initial forensic image acquisition in line with relevant investigation standards and analyze them to determine appropriate remediation actions.
</li><li>Analyze network alerts from various sources to identify root causes of incidents.
</li><li>Track and document incidents.
</li><li>Develop and publish cybersecurity defense guidelines and procedures.
</li><li>Collect intrusion artifacts and leverage them to reduce future incidents.
</li><li>Prepare &ldquo;lessons learned&rdquo; reports.
</li><li>Monitor external threat intelligence sources.
</li><li>Coordinate incident response efforts.
</li><li>Support legal teams when required.
</li><li>Collaborate with threat analysts.
</li><li>Identify information sources for investigations.
</li></ul><h3 class="jobSectionHeader">Years of Experience</h3>

4 &ndash; 6 years
<h3 class="jobSectionHeader">
Education</h3>

Bachelor&rsquo;s degree in Computer Science or equivalent
<h3 class="jobSectionHeader">
Certifications</h3>

GCIH + Security+</div></div>

البنك التجاري الدولي

<div></div><div><div>Description<div></div> 
JOB PURPOSE

To oversee and manage the Security Operations Center (SOC) related activities including, threat monitoring, triage and response to develop detailed root cause analysis and escalate for emergency response as per the approved process. 

Description

Security Incident Response Management

1. Provide management oversight for the identification, triage and response of events or incidents of apparent security breaches to maintain the security posture.
2. Conduct Security event analysis reporting on activities through regular scheduled reporting and communications in order to highlight the main incidents and events.
3. Identify and handle incidents, which need special attention or escalation to secure the overall bank&rsquo;s security and mitigate potential risks.
4. Direct the creation and maintenance of incident response run books of the Analysts team run-books.

5. Act as a lead throughout incident scenarios and provide subject matter expertise in cybersecurity incident response to facilitate the investigation and root cause analysis.

6. Ensure proper reporting for daily, monthly, quarterly and annual security posture, SOC and executive reporting and dashboards.

7. Recommend security solutions based on security postures and gaps identified.

8. Manage communication with other departments to facilitate investigation process.

9. Develop and update SLA between SOC and other departments when required and maintain SLA.

Strategy

10. Participate in the formulation and implementation of the Security Operations Center Department strategy to ensure the alignment with CIB strategy

Policies, Processes and Procedures

11. Participate and recommend improvements to policies, processes and procedures and manage their implementation to ensure all relevant procedural/legislative requirements are carried out.

Day-to-day Management

12. Supervise the day to day operations of the Incident Management &amp; Response team providing some guidance in the related area, encouraging teamwork and facilitating related professional work processes in order to achieve high performance standards

Supervision

13. Supervise the activities and work of subordinates to ensure that all work within a specific area is carried out in an efficient manner and in compliance with the set policies, processes and procedures

Compliance

14. Ensure compliance with all relevant CBE regulations, banking laws, AML regulations and internal CIB policies and code of conduct in order to maintain CIB&rsquo;s sound legal position and mitigate any potential risks<div> 
</div></div><div>
Qualifications<div></div> 
Qualifications &amp; Experience
<ul><li> Bachelor&rsquo;s degree of Engineering, Computer Science or equivalent</li></ul>
<ul><li> Minimum 8 - 10 years of experience in IT Security or related fields</li></ul>
<ul><li> Strong understanding of incident handling procedures
</li></ul><ul><li> Experience with packet and log analysis using commercial and open source tools</li></ul>
<ul><li> Recommended Certifications:</li></ul>

o Certified Information Systems Security Professional (CISSP)

o Certified Information Security Manager (CISM)
<ul><li> Mandatory Certification:</li></ul>

o GIAC Certified Incident Handling (GCIH) 


Skills
<ul><li> Very good command of English and Arabic language</li></ul>
<ul><li> Very good Analytical skills</li></ul>
<ul><li> Very good Communication skills</li></ul>

Very good MS Office skills 
<div>
</div></div><div>Primary Location: Egypt-Giza-SMART VILLAGE BLDG. 2</div><div>
Job: Back Office</div><div>
Organization: FINANCE, STRATEGY, OPERATIONS &amp; TECHNOLOGY</div><div>
Shift: Day Job</div><div>
Job Type: Full-time Employee</div></div>

SECURITY INCIDENT RESPONSE MANAGER

TrendAI

<div>
 
 When you join Trend, you become part of a unique and diverse global family and you get to work towards a world safe for exchanging digital information.
 
 
 
 
 About Trend Micro
 
 
 
 Trend Micro, a global cybersecurity leader, helps make the world safe for exchanging digital information. Fueled by decades of security expertise, global threat research, and continuous innovation, Trend Micro's cybersecurity platform protects hundreds of thousands of organizations and millions of individuals across clouds, networks, devices, and endpoints. As a leader in cloud and enterprise cybersecurity, the platform delivers a powerful range of advanced threat defense techniques optimized for environments like AWS, Microsoft, and Google, and central visibility for better, faster detection and response. With 7,000 employees across 65 countries, Trend Micro enables organizations to simplify and secure their connected world. For additional information, visit www.trendmicro.com
 
 
 
 Position Overview
 
 
 
 The Incident Response Coordinator with Egypt serves as the central point of contact between Trend Micro&rsquo;s IR team, internal stakeholders, and customers, ensuring smooth execution and successful outcomes of incident response engagements through effective coordination and communication.
 
 
 
 Primary Responsibilities
 
 
 
 <ul>
 <li>
 Relationship Management: Establish and maintain strong relationships with key stakeholders including customers, sales, partners, and technical teams.
 </li>
 <li>
 Incident Management: Supporting the management of cyber incidents through the incident response lifecycle act as a liaison between Trend Micro IR Analysts and other stakeholders
 </li>
 <li>
 Coordinate Engagement Scoping: Develop a deep understanding of customers&rsquo; goals and outcomes to address their operational and security requirements and draft an engagement scope of work
 </li>
 <li>
 Resource Alignment: Coordinate and allocate appropriate resources and subject matter experts based on case requirements.
 </li>
 <li>
 Case Tracking: Monitor IR case progress and ensure timely task completion by IR analysts; draft summaries of ongoing operations and be able to provide oral updates/presentations for various levels of leadership.
 </li>
 <li>
 Information Gathering: Collect incident details, symptoms, remediation options, and associated risks to support stakeholder communication.
 </li>
 <li>
 Transition Management: Oversee the handoff of customers to standard support operations upon completion of IR engagement and delivery of the final report.
 </li>
 <li>
 Post-Incident Review: Lead post-incident review meetings and determine the necessity of post-mortems collaborating with Business Unit teams to design and implement long-term security solutions that enhance customer protection and support business growth
 </li>
 <li>
 Opportunities Support and Tracking: Support and track IR services relevant opportunities and documenting IR engagements and activities and present it
 
 
 </li>
 </ul>
 
 Required Experience
 
 
 
 <ul>
 <li>
 Bachelor's degree in digital Forensics, Cybersecurity, Computer Engineering, Computer Science, Telecommunications/Electronics Engineering, Information Technology, or equivalent relevant professional certifications.
 </li>
 <li>
 Minimum 5 years of experience in IT or Cybersecurity-related roles.
 </li>
 <li>
 Fluent in Arabic and English (written and spoken).
 </li>
 <li>
 At least 3 years of experience in a customer interfacing role presenting technical information to both technical and non-technical audiences.
 </li>
 <li>
 Familiarity with DFIR processes and ability to absorb technical cybersecurity information.
 </li>
 <li>
 Basic knowledge in one or more cybersecurity domains.
 </li>
 <li>
 Based in or willing to relocate to Cairo, Egypt.
 
 
 </li>
 </ul>
 
 Preferred Experience
 
 
 
 <ul>
 <li>
 Experience in a similar role within a cybersecurity vendor or DFIR provider.
 </li>
 <li>
 Hands-on experience in DFIR-related roles.
 </li>
 <li>
 Experience in presales or business development, preferably in cybersecurity services.
 </li>
 <li>
 Experience in IT project management, especially security-related projects.
 </li>
 <li>
 Exposure to escalation management, customer success, technical account management, or people management.
 </li>
 <li>
 Experience creating/drafting cybersecurity service content and/or contracts.
 </li>
 <li>
 Certifications such as GCIL, CISSP, CISM, PMP, PRINCE2, GCIH
 </li>
 <li>
 Familiarity with Trend Micro products
 </li>
 <li>
 Fluency in French or Turkish.
 
 
 </li>
 </ul>
 Trend Micro strive to build an environment of equity and inclusion, which reflects diverse points of view. We welcome, value, promote, and celebrate diversity - the very experiences and attributes that make us who we are, including but not limited to race, ethnicity, nationality, gender, gender identification, sexual orientation, level of ability, age, religion, veteran status, socio-economic status, and political philosophy.
 
 
 We embrace change, empower people, and encourage innovation. Join Trend Micro and Thrive with us.
 
 
</div>

Incident Response Coordinator

Sayers Technology

OverviewType: Temporary Short-Term Contract - 6 weeks Start: Immediate (this week)Location: Remote<ul><li>Effective communication skills</li><li>Ability to explain technical risks to a non-technical business partner</li><li>Strong written skills</li></ul>i. Translate cyber risk into business impact<ul><li>Handling sensitive data responsibly</li><li>Incident response Facilitation</li></ul>i. Liaison between the business, third-party and internal IR/CTI teamii. Creating and document incident response reports<ul><li>Teamwork</li><li>The ability to work independently</li><li>Proven and strong cross functional collaboration</li><li>Agile</li><li>Critical Thinking</li><li>Ability to analyze complex data and detect patterns</li><li>Attention to Detail</li><li>Ability to quickly identify anomalies and conflicts across responses</li><li>Effective risk-based prioritization</li><li>Risk Assessment </li><li>Evaluating responses and ability to identify and prioritize GAPs in control</li><li>Knowledge Area</li><li>Strong working understanding of NIST 800-53,</li><li>ISO27001 a bonus</li><li>MITRE ATT&amp;CK</li><li>Cybersecurity Principles</li></ul>i. E.g., Confidentiality, Integrity, Availability<ul><li>Compliance &amp; Regulations</li></ul>i. E.g., GDPR, HIPAA, PCI,ii. FAR is a plus<ul><li>Cloud Security</li></ul>i. AWS, Azure, Google cloud security basics,ii. FAR is a plus<ul><li>Vulnerability Management</li></ul>i. KEV ListPay: $65.00 - $70.00 per hourWork Location: Remote

Cybersecurity Consultant

QatarEnergy

Role: Senior Cyber Security Incident ResponderLocation: Doha, Qatar (QatarEnergy)Key Purpose: Lead advanced incident response for IT &amp; OT systems, investigate threats, and protect critical infrastructure.Experience: 10+ years IT security, 6+ years SOC/IR experienceTools/Tech: SIEM, IDS/IPS, anti‑malware, network securityEducation: Bachelor&rsquo;s in Cybersecurity / Computer ScienceThe Senior Cyber Security Incident Responder is a subject‑matter expert in QatarEnergy&rsquo;s Cyber Security team responsible for proactively detecting, analysing, and responding to advanced cyber threats targeting both IT networks and Operational Technology (OT) environments (like industrial control systems).This role works 24/7 to handle incident response activities throughout the entire lifecycle &mdash; from detection and containment to mitigation and recovery &mdash; often using advanced tools and methods to protect critical infrastructure.Pay: From QAR33,000.00 per monthWork Location: In person

Sr. Cyber Security Incident Responder (QatarEnergy)

Adobe

The Challenge
 
The Adobe Cyber Defense Center is looking for a Security Incident Responder to play an important role in our cybersecurity incident response team. Cyber threats are evolving, and perimeter security and automated protection are not always enough , so when compromises occur, the IR team steps in to investigate and respond. You will work closely with senior incident responders and analysts to detect, analyze, and mitigate security incidents to ensure the confidentiality, integrity, and availability of Adobe's systems. Additionally, rather than sit back and wait for attackers to strike , we partner closely with the Threat Hunting Team to proactively search through large datasets to seek out malicious or suspicious activities. Enjoy a challenge? We invite you to help take Adobe’s Incident Response program to the next level!
 
What You Will Do
 
Investigate and assess the severity of security incidents, classifying them according to established processes.
 
Develop and present comprehensive and accurate reports, training, and presentations for both technical and non-technical audiences .
 
Work closely with the Threat Hunting Team to conduct proactive and iterative hunts through cloud and enterprise networks, endpoints, or datasets to detect malicious, suspicious, or risky activities that have evaded detection by existing tools .
 
Conduct log analysis and digital forensics in support of incident response investigations .
 
Maintain detailed records of incident response activities, including timelines, actions taken, and evidence collected.
 
Assist in implementing mitigation strategies and countermeasures to contain and eradicate security threats.
 
Stay up to date with the latest security threats and trends, sharing knowledge with the team.
 
What You Need to Succeed
 Foundational understanding of cybersecurity concepts, principles, and best practices
 Familiarity with security technologies such as SIEM platforms, IDS/IPS, and endpoint detection and response (EDR) tools
 Strong digital forensics and log analysis skills
 Knowledge of common cyber threats, attack vectors, and adversary tactics
 Excellent analytical, critical thinking, and problem-solving abilities
 Strong written and verbal communication skills, with the ability to document findings clearly and concisely
 Ability to work both independently and collaboratively within a team environment
 A relationship-oriented mindset with a commitment to cross-functional partnership
 Demonstrable ability to prioritize in a fast-paced, dynamic environment
 Intellectual curiosity and a passion for continuous learning in the cybersecurity field
 Flexibility to support critical incidents outside of standard business hours as needed
 
About Adobe
 Adobe empowers everyone to create through innovative platforms and tools that unleash creativity, productivity and personalized customer experiences. Adobe’s industry-leading offerings including Adobe Acrobat Studio, Adobe Express, Adobe Firefly, Creative Cloud, Adobe Experience Platform, Adobe Experience Manager, and GenStudio enable people and businesses to turn ideas into impact, powered by AI and driven by human ingenuity.
 
Our 30,000+ employees worldwide are creating the future and raising the bar as we drive the next decade of growth. We’re on a mission to hire the very best and believe in creating a company culture where all employees are empowered to make an impact. At Adobe, we believe that great ideas can come from anywhere in the organization. The next big idea could be yours.
 
Let’s Adobe together
 At Adobe, we believe in creating a company culture where all employees are empowered to make an impact. Learn more about Adobe life, including our values and culture , focus on people, purpose and community , Adobe for All , comprehensive benefits programs , the stories we tell , the customers we serve, and how you can help us advance our mission of empowering everyone to create.
 
Adobe is proud to be an Equal Employment Opportunity employer. We do not discriminate based on gender, race or color, ethnicity or national origin, age, disability, religion, sexual orientation, gender identity or expression, veteran status, or any other protected characteristic. Learn more.
 
Adobe aims to make our Careers website and recruiting process accessible to any and all users. If you have a disability or special need that requires accommodation to navigate our website or complete the application process, email accommodations@adobe.com or call +1 408-536-3015.
 
AI Use Guidelines for Interviews: 
Our interviews are designed to reflect your own skills and thinking. The use of AI or recording tools during live interviews is not permitted unless explicitly invited by the interviewer or approved in advance as part of a reasonable accommodation. If these tools are used inappropriately or in a way that misrepresents your work, your application may not move forward in the process.
 
At Adobe, we empower employees to innovate with AI — and we look for candidates eager to do the same. As part of the hiring experience, we provide clear guidance on where AI is encouraged during the process and where it’s restricted during live interviews. See how we think about AI in the hiring experience .
 
Expected Pay Range: Our compensation reflects the cost of labor across several U.S. geographic markets, and we pay differently based on those defined markets. The U.S. pay range for this position is $144,800 -- $261,450 annually. Pay within this range varies by work location and may also depend on job-related knowledge, skills, and experience. Your recruiter can share more about the specific salary range for the job location during the hiring process.
 
In California, the pay range for this position is $180,600 - $261,450
 In Washington, the pay range for this position is $170,900 - $247,550
 
At Adobe, for sales roles starting salaries are expressed as total target compensation (TTC = base + commission), and short-term incentives are in the form of sales commission plans. Non-sales roles starting salaries are expressed as base salary and short-term incentives are in the form of the Annual Incentive Plan (AIP).
 
In addition, certain roles may be eligible for long-term incentives in the form of a new hire equity award.
 
State-Specific Notices: 
California : 
Fair Chance Ordinances
 Adobe will consider qualified applicants with arrest or conviction records for employment in accordance with state and local laws and “fair chance” ordinances.
 
Colorado: 
Application Window Notice
 
If this role is open to hiring in Colorado (as listed on the job posting), the application window will remain open until at least the date and time stated above in Pacific Time, in compliance with Colorado pay transparency regulations. If this role does not have Colorado listed as a hiring location, no specific application window applies, and the posting may close at any time based on hiring needs.
 
Massachusetts: 
Massachusetts Legal Notice
 It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.

SR CSIRT Responder

Search 10000+ Incident response specialist jobs near you this April. New roles added regularly across leading industries. Apply today.

10000 incident response specialist jobs Near Me

Cybersecurity Incident Response Specialist

Cybersecurity Incident Response Specialist

SECURITY INCIDENT RESPONSE MANAGER

Incident Response Coordinator

Cybersecurity Consultant

Sr. Cyber Security Incident Responder (QatarEnergy)

SR CSIRT Responder