Incident Responder Jobs

Incident responders (IR / DFIR) contain and investigate active breaches - forensics, malware triage, and post-incident hardening. It is a high-stakes, high-signal specialization that grows straight out of SOC and detection work.

58 live Incident Responder roles across the cybersecurity employers we track - updated hourly, apply directly.

3 new Incident Responder roles posted this week

Get weekly alerts for new Incident Responder jobs:

Latest Incident Responder roles

sophos logo
Posted Aug 5
dragos logo
Posted Jul 29
lastpass logo

LastPassUnited States

Detection EngineeringRemote
Posted Jul 27
trendmicro logo
Posted Jul 27
sygnia logo
Posted Jul 26
trendmicro logo

Trend MicroKuala Lumpur

Detection Engineering
Posted Jul 23
trendmicro logo

Trend MicroIrving, Texas

Detection Engineering
Posted Jul 22
trendmicro logo

Trend MicroTaipei

Detection Engineering
Posted Jul 21
twilio logo

TwilioUnited States

$141,520 - $176,900Detection EngineeringRemote
Posted Jul 17
sentinellabs logo

SentinelOneSlovakia

Detection Engineering
Posted Jul 16
sentinellabs logo

SentinelOneCzech Republic

Detection EngineeringHybrid
Posted Jul 16
sentinellabs logo
Posted Jul 16
cloudflare logo

Cloudflare

€54,000 - €75,000Detection EngineeringHybrid
Posted Jul 16
trendmicro logo
Posted Jul 16
trendmicro logo

Trend MicroIrving, Texas

Detection Engineering
Posted Jul 15
tenex logo

TenexKansas City, MO SOC

Detection Engineering
Posted Jul 15
twilio logo
Posted Jul 10
twilio logo
Posted Jul 10
crowdstrike logo
Posted Jul 1
Wizinc logo

WizTel Aviv

Detection Engineering
Posted Jun 30
Wizinc logo
Posted Jun 30
cloudflare logo
Posted Jun 24
sentinellabs logo
Posted May 31
sentinellabs logo
Posted May 31

Explore related searches

Frequently asked questions

What does an Incident Responder do?
Incident responders (IR / DFIR) contain and investigate active breaches - forensics, malware triage, and post-incident hardening. It is a high-stakes, high-signal specialization that grows straight out of SOC and detection work.
How many Incident Responder jobs are there right now?
We are tracking 58 live Incident Responder roles across the cybersecurity employers we monitor, updated hourly. Each listing links straight to the employer's own application page.
Are Incident Responder jobs remote?
Some are. Many Incident Responder roles are hybrid or on-site because of tooling and data-sensitivity, but fully-remote listings appear regularly - filter the board or browse our remote cybersecurity jobs page.
What certifications help you get an Incident Responder job?
GCIH or CompTIA Security+ is the credential most often named in Incident Responder postings. Beyond a certificate, hands-on evidence - a home lab, CTF write-ups, or public detections - carries the most weight in screening.

Related cybersecurity searches

Stay ahead of the curve. Get new infosec jobs in your inbox.