Incident Responder Jobs
Incident responders (IR / DFIR) contain and investigate active breaches - forensics, malware triage, and post-incident hardening. It is a high-stakes, high-signal specialization that grows straight out of SOC and detection work.
67 live Incident Responder roles across the cybersecurity employers we track - updated hourly, apply directly.
Get new Incident Responder jobs in your inbox
Join 450+ security professionals · Weekly, free, unsubscribe anytime
Posted Sep 24
Detection EngineeringRemote
Posted Sep 17
Detection EngineeringRemote
Posted Sep 14
Detection EngineeringRemote
Posted Sep 9
Posted Sep 4
Posted Sep 1
Detection EngineeringRemote
Posted Aug 31
Posted Aug 21
Posted Aug 21
Detection EngineeringRemote
Posted Aug 21
Detection EngineeringRemote
Posted Aug 12
Detection Engineering
Posted Aug 10
Posted Jul 31
Posted Jul 29
Detection EngineeringHybrid
Posted Jul 22
Explore related searches
- Browse the Detection & SOC hub for the full specialization.
- Prefer remote? See remote cybersecurity jobs.
- Threat Hunter jobs
- MDR jobs
Frequently asked questions
- What does an Incident Responder do?
- Incident responders (IR / DFIR) contain and investigate active breaches - forensics, malware triage, and post-incident hardening. It is a high-stakes, high-signal specialization that grows straight out of SOC and detection work.
- How many Incident Responder jobs are there right now?
- We are tracking 67 live Incident Responder roles across the cybersecurity employers we monitor, updated hourly. Each listing links straight to the employer's own application page.
- Are Incident Responder jobs remote?
- Some are. Many Incident Responder roles are hybrid or on-site because of tooling and data-sensitivity, but fully-remote listings appear regularly - filter the board or browse our remote cybersecurity jobs page.
- What certifications help you get an Incident Responder job?
- GCIH or CompTIA Security+ is the credential most often named in Incident Responder postings. Beyond a certificate, hands-on evidence - a home lab, CTF write-ups, or public detections - carries the most weight in screening.