Senior Cyber Incident Responder Jobs

The Opportunity Our Adobe Cyber Defense Center seeks a skilled and curious Senior Cyber Incident Responder eager to tackle new technologies. You'll use your digital forensics and network-based investigation expertise in this crucial role to boost our incident response capabilities. Collaborating with a multinational team, you'll conduct thorough investigations and defend our enterprise against evolving cyber threats. If you thrive in a challenging environment and are ready to enhance our Incident Response program, we want to hear from you! What you will do Incident Response Experience : Respond to incidents to retrieve, analyze, and preserve critical data, utilizing forensics and network knowledge on a global scale. Conduct thorough host forensics, network forensics, log analysis, and malware triage to arrive at conclusive findings and support incident response investigations. Tool Development : Identify areas for improvement in processes and tooling related to response at scale. Develop and enhance scripts, tools, and methodologies to support the collection and analysis of data on a large scale, optimizing our incident investigation capabilities. Team Support and Mentorship: Provide support and guidance to other members of our CSIRT team, working closely with Staff level responders and management. Global Reporting and Coordination : Translate technical analysis into clear reports and coordinate response actions with team members globally. Assist in drafting detailed reports and assigning remediation recommend dations across internal and external organizations. Training and Presentations: Develop and present comprehensive training sessions and presentations for both technical and non-technical audiences. Global Collaboration : As an expert in the field, work closely with teams globally during incidents, including threat hunting,

Lead OT Cybersecurity Engineer will spearhead the design, implementation and operations of cybersecurity controls across OT/ICS environments. This role acts as the technical authority for securing industrial automation systems, ensuring visibility, resilience, compliance and threat protection across plants and manufacturing operations. The position requires close collaboration with Plant Engineering, OEM vendors, IT Security teams, Cybersecurity team and SOC to strengthen OT cyber maturity, implement secure architectures and drive incident response readiness aligned with global standards (IEC 62443, NIST 800 82, ISO 27001, etc). Source: Adani Group | Job ID: 55796

The Head OT Cybersecurity is responsible for overseeing and leading the organization’s operational technology (OT) cybersecurity strategy, ensuring the security and integrity of critical infrastructure, industrial control systems (ICS), and operational environments. This senior leadership role will drive the development, implementation, and maintenance of OT cybersecurity policies, standards, and practices to protect OT assets from cyber threats. The Head OT Cybersecurity will also oversee incident response, risk management, and compliance efforts while collaborating with cross-functional teams to secure the organization’s OT environments. Source: Adani Group | Job ID: 52021

About the Team At DoorDash, including international brands Deliveroo and Wolt, we’re building the industry’s most scalable and reliable delivery network to support our three-sided marketplace of consumers, merchants, and Dashers. Global Cyber Defense is a highly talented and globally distributed team that covers response, intelligence, insider risk, threat hunting, automation, and detection engineering. We exist to keep our brands safe for the Dashers, merchants, and consumers who depend on us. Our mission is to detect, investigate, and respond to cyber threats with speed and precision, while continuously hardening our defenses through automation, AI, and cross-regional collaboration. About the Role The senior detection engineer is part of the larger detection engineering team that creates, tunes, maintains, and improves the detection lifecycle. This hands-on role is at the forefront of agentic detection engineering of a rapidly maturing security function. You’ll work closely with our data pipelines team, incident response, insider risk, and threat intelligence teams to make the most effective detection content to detect threats as quickly as possible. Detection at DoorDash spans more than the corporate estate. You’ll build coverage across cloud infrastructure, corporate endpoints and identity, and the marketplace itself - where consumer, merchant, and Dasher platforms create abuse and insider-risk patterns you won’t find in a typical enterprise SOC. We’re actively consolidating detection onto a modern data platform, so you’ll have real influence over what the pipeline looks like. This role reports to the Senior Manager, Cyber Defense located in the United States and participation in an on-call rotation is required for this role. You’re excited about this opportunity because you will… Conduct hands-on detection engineering for custom alerting, to include implementing risk-based analytics to reduce alert volumes and promote high-fidelity alert

About the Team DoorDash is one of the world's most trusted on-demand logistics platforms. The Global Safety and Security team exists to keep it that way, protecting our people, property, operations, brand, and reputation across all our markets. We manage risk and create value through agility, technology, and a people-first approach. Our DoorDash, Deliveroo, and Wolt brands now span more than 40 countries, dozens of offices, and tens of thousands of employees. Protective Services is the function accountable for the safety of the people we protect and the environments they live and work in, wherever they are. About the Role We are hiring a Senior Manager, Protective Services to lead protective operations, reporting to the Director, Protective Services. This is as much a build-and-execute mandate as a leadership one. You own the decisions that keep protection working, including how teams are staffed and assigned, how protection is set for a given person and situation, what we spend and which vendors we use, what people are trained to do, and how incidents get handled. This is a player-coach role, and the coaching half does not keep you off the field. You will work advances, travel with the people we protect, and take your turn in the rotation while setting the standard the team works to. Protection here is a service. It works when the people we protect can move through their lives with as little friction as we can manage, and when they trust the team enough to tell us what we need to know. You own protective operations, training and standards, vendor management, incident response, and converged physical-cyber protection. Protective teams, intelligence, and cybersecurity work on the same problem simultaneously, and detection and intelligence capabilities drive our protective posture. Success in the first year means a tight operating rhythm, training and qualification standards that hold up against the best protective programs, a team that is current and deployable

Our vision is to transform how the world uses information to enrich life for all . Micron Technology is a world leader in innovating memory and storage solutions that accelerate the transformation of information into intelligence, inspiring the world to learn, communicate and advance faster than ever. About Our Team The AI Security team is a newly established organization within Micron's Cyber Defense & Resilience (CDR) group, reporting directly to the Deputy CSO. We provide AI and automation engineering expertise across CDR's security functions, partnering with Security Operations, Governance Risk & Compliance, Third-Party Risk, Security Awareness, and Security Architecture teams to strengthen the security of a global environment supporting 50,000+ employees and 100,000+ devices! Position Overview We are seeking a Principal AI Security Architect to serve as the senior-most technical authority for AI security within Cyber Defense & Resilience! This role will define and drive AI security strategy, be responsible for AI threat modeling and governance, lead AI-related incident response efforts, and act as the primary advisor to executive leadership on the secure use, defense, and response to emerging AI technologies and threats. Responsibilities Develop and own the AI security strategy, threat model, and roadmap for Cyber Defense & Resilience. Establish quarterly priorities for AI security initiatives and provide strategic direction across multiple security functions. Define risk classification criteria and review high-risk AI agent architectures, including systems with customer data access, autonomous decision-making, and external system integrations. Act as the lead coordinator for AI-related cybersecurity incidents, partnering with ent

For more than 30 years, SonicWall has delivered a partner-first unified cybersecurity portfolio that helps SMBs, MSPs, and IT teams consolidate network security, endpoint security, security service edge (SSE), and threat response across hybrid environments. By bringing connected technology, real-time threat intelligence, automation, and expert services together, SonicWall helps organizations simplify security operations, achieve better security outcomes, and lower total cost of ownership. Backed by a global ecosystem of more than 17,000 partners, SonicWall delivers enterprise-grade protection built for SMB and mid-market realities. For more information, visit www.sonicwall.com or follow us on X, LinkedIn , Facebook , and Instagram . Roles & Responsibilities Design, deploy, and manage AWS cloud infrastructure and Kubernetes (EKS) environments. Build, maintain, and optimize GitLab CI/CD pipelines for automated deployments. Implement DevSecOps best practices, including infrastructure security, vulnerability management, and compliance controls. Monitor, troubleshoot, and improve platform reliability, performance, and scalability. Deploy and manage cloud-native applications, databases, and supporting services. Collaborate with development teams on architecture, deployment strategies, and production readiness. Drive infrastructure automation using Infrastructure as Code (Terraform). Support incident management, root cause analysis, and operational excellence initiatives. Mandatory Requirements 6+ years of hands-on DevOps/DevSecOps experience in production environments. Strong expertise with AWS services including EKS, EC2, S3, CloudFront, WAF, Lambda, and VPC. Minimum 3+ years of Kubernetes experience, preferably Amazon EKS. Hands-on experience building and managing GitLab CI/CD pipelines. Strong Linux administration and troubleshooting skills. Experience with Infrastructure as Code using Terraform. Proficiency in Python for automation and scriptin

What We Do: Cybercrime is growing, and more businesses are getting hit by threats that used to target only the biggest organizations. That pushes defenders like us to operate at the highest level, and it deepens our need for good people who want to make a meaningful impact. Founded in 2015 by former NSA cyber operators, Huntress is a remote-first team working to make enterprise-grade cybersecurity accessible to businesses of all sizes. We work closely with security teams and service providers protecting complex environments, often without the time or headcount to handle it all. That’s why we build our technology in-house and back it with a 24/7 human-led Security Operations Center (SOC). As a result, our platform is never disconnected from the experts who manage it, ensuring our customers' protection. Huntress now secures more than 5M endpoints and 16M identities worldwide. Those numbers keep growing because more businesses rely on us to help carry the load and operate with more confidence. Every day, you can see that commitment in how we stand with our customers and how we show up for each other. Reports to: Senior Manager, Security Operations Center Location: Remote Australia Compensation Range: $110,000 to $140,000 AUD base plus bonus and equity What You’ll Do: You’re a hands-on SOC Analyst who thrives on detecting and responding to cybercrime. You’ll triage Active Hands-On Keyboard intrusions, track attackers through networks, and help remove them before they achieve their objectives. You’ll contextualise endpoint telemetry, analyse logs, leverage forensic artifacts, and understand malware to uncover the full scope of an intrusion. You give a $ht about protecting customers and improving how the team operates, taking ownership of investigations and acting on the information available. You bring Warrior Spirit to complex incidents, staying resilient and composed under pressure. You are Outcome-Obsessed, measuring your work by the threats contained, customers

About Us: Paytm is India’s largest digital payments and financial services platform, leading the mobile QR revolution. We power millions of businesses and individuals, and we’re building scalable, resilient systems to serve half a billion Indians and beyond. Here at Paytm, technology isn't just about keeping up, it's about building the future. We believe the next generation of engineers must not only scale systems to billions but also leverage AI and GPT tools to accelerate innovation. Role Overview: We are seeking an experienced Senior Information Security Manager to lead our security initiatives and ensure the integrity, confidentiality, and availability of our systems and data. This role is crucial in safeguarding our digital assets and maintaining compliance with industry standards. 1. Should take care of Infosec functions by coordinating with various stakeholders 2. Lead and manage Vulnerability Assessment (VA) and Penetration Testing (PT) programs end to end. 3. Should have technical hands-on knowledge on different VAPT tools, like Qualys, Tenable, BurpSuite, Checkmarx etc. 4. Ensure all cyber security compliance and audits directions issued from time to time by the regulator like SEBI, RBI etc. 5. Coordination with SOC, Technology team to follow up the incidents till closure 6. Follow escalation matrix for delayed issues 7. Assist in Internal and External Audits (Regulatory) and work towards closure of observations if any 8. Should have project management espouse, to run the security PMO for ensuring the multiple initiatives with internal / external teams, vendors, and regulators. 9. Prepare and review new/existing policies, procedures, and secure configure/ hardening documents. 10. Should possess technical skills and knowledge to handle/manage security solutions if required 11. Should have understanding of data protection technologies & laws, including DLP, DSPM, DPDPA, IT Act and international regulations like GDPR 12. Exposure to Cloud Environment & Appl

Shape the Future with Dun & Bradstreet At Dun & Bradstreet, we believe data has the power to create a better tomorrow. As a global leader in business decisioning data and analytics, we help companies worldwide grow, manage risk, and innovate. Since 1841, businesses have trusted us to turn uncertainty into opportunity. We’re a diverse, global team that values creativity, collaboration, and bold ideas. Are you ready to make an impact and help shape what’s next? Join us! Explore opportunities at dnb.com/careers.

About the Team Critical Harm Operations sits within User Safety & Risk Operations and builds enforcement systems for Frontier Risk and Material Harm that are accurate, fast, defensible, and built to scale. The Cyber vertical turns policy into reviewer standards, calibrated judgment, quality systems, escalation paths, and automation guardrails. About the Role We are looking for a senior cybersecurity practitioner and operations strategist to raise the quality, scalability, and technical rigor of our Cyber Operations. You will combine hands-on cyber judgment with systems-level operating design: resolve the hardest dual-use questions, evolve SOPs, uplift reviewers and vendors, and build practical tools and automations. This is a senior IC role. Success is not primarily cases closed; it is durable improvement in the operating model and the reviewers who run it. This Toronto-based role is currently remote and is expected to transition to an in-office arrangement. In this role, you will: Drive the Cyber Operations operating model across domain priorities, SOPs, escalation paths, quality health, vendor capability, roadmap inputs and help inform trusted access strategies. Serve as the senior cyber expert for complex or high-risk decisions across ChatGPT, API, Codex, agents, and emerging product surfaces. Translate policy ambiguity, quality misses, appeals, and reviewer disagreement into clear decision rules, calibration examples, training, and tooling requirements. Build durable operating systems and quality loops: golden sets, holdouts, double-labeling, adjudication, error taxonomies, reviewer calibration, and automation evaluations. Raise FTE and BPO capability through onboarding, certification, coaching, recurring calibration, and vendor-performance partnership. Use quality, appeals, SLA, backlog, and disagreement signals to diagnose root causes and prioritize high-leverage fixes. Build hands-on solutions—SQL analyses, scripts, dashboards, LLM eval workflows, evidenc

ABOUT THE TEAM Critical Harm Operations sits within User Safety & Risk Operations and builds enforcement systems for Frontier Risk and Material Harm that are accurate, fast, defensible, and built to scale. The Cyber vertical turns policy into reviewer standards, calibrated judgment, quality systems, escalation paths, and automation guardrails. ABOUT THE ROLE We are looking for a senior cybersecurity practitioner and operations strategist to raise the quality, scalability, and technical rigor of our Cyber Operations. You will combine hands-on cyber judgment with systems-level operating design: resolve the hardest dual-use questions, evolve SOPs, uplift reviewers and vendors, and build practical tools and automations. This is a senior IC role. Success is not primarily cases closed; it is durable improvement in the operating model and the reviewers who run it. IN THIS ROLE, YOU WILL: Drive the Cyber Operations operating model across domain priorities, SOPs, escalation paths, quality health, vendor capability, roadmap inputs and help inform trusted access strategies. Serve as the senior cyber expert for complex or high-risk decisions across ChatGPT, API, Codex, agents, and emerging product surfaces. Translate policy ambiguity, quality misses, appeals, and reviewer disagreement into clear decision rules, calibration examples, training, and tooling requirements. Build durable operating systems and quality loops: golden sets, holdouts, double-labeling, adjudication, error taxonomies, reviewer calibration, and automation evaluations. Raise FTE and BPO capability through onboarding, certification, coaching, recurring calibration, and vendor-performance partnership. Use quality, appeals, SLA, backlog, and disagreement signals to diagnose root causes and prioritize high-leverage fixes. Build hands-on solutions—SQL analyses, scripts, dashboards, LLM eval workflows, evidence enrichment, routing logic, and lightweight automations—that improve decision quality and reduce manua

The Business Unit Cyber Lead will be responsible for leading and managing the cybersecurity strategy, execution, and risk management efforts within a specific business unit. This role serves as the primary point of contact for all cybersecurity-related matters within the business unit, ensuring that security risks are effectively identified, mitigated, and managed. The Business Unit Cyber Lead will work closely with business leaders, IT teams, and the enterprise cybersecurity function to ensure that cybersecurity initiatives are aligned with business objectives and effectively executed to protect the organization’s digital assets. Source: Adani Group | Job ID: 55798

Principal Consultant – Cyber & Operational Resilience Location: London (Hybrid) | Practice Area: Finance, Risk, Regulatory & Financial Crime | Type: Permanent Strengthen cyber resilience and safeguard critical operations across financial services The Role Capco is seeking experienced Principal Consultants to join our Cyber & Operational Resilience capability within the Finance, Risk, Regulatory & Financial Crime (FRRF) practice. You'll work with senior stakeholders across financial services organisations to design and deliver cyber resilience strategies, implement robust resilience frameworks, and enhance operational resilience capabilities. This role combines strategic advisory with hands-on delivery, helping clients strengthen cyber risk management, meet evolving regulatory expectations, and build resilient operating models. You'll also leverage approved AI tools and AI-enabled ways of working to enhance analysis, improve delivery, and generate data-driven insights while applying responsible AI practices and appropriate human oversight. What You'll Do Deliver cyber and operational resilience transformation programmes aligned to regulatory frameworks such as PRA, DORA, and other global resilience standards, identifying opportunities to leverage AI-enabled workflows and automation. Assess and enhance cyber resilience capabilities, including resilience frameworks, operating models, controls, and governance, using AI-enabled analysis where appropriate to strengthen decision-making and operational effectiveness. Support third-party and vendor risk assessments, identifying vulnerabilities across supply chains and technology ecosystems while combining AI-enabled insights with expert judgement. Design and implement resilience governance, Important Business Services (IBS), Impact Tolerance (ITOL), scenario testing, and reporting frameworks, ensuring robust governance, validation, and oversight where AI-assisted tools are utilised. Collaborate with technolog

About the Team OpenAI's mission is to ensure that artificial intelligence benefits all of humanity. OpenAI for Government works with U.S. and allied government institutions to support the responsible adoption of AI across defense, intelligence, federal civilian, state and local, and international public-sector missions. We work at the intersection of technology, policy, operations, security, and delivery to help public servants use frontier AI in ways that are effective, trusted, aligned with democratic values, and grounded in real-world consequences. The team helps government agencies transform how they work through secure, compliant AI tools and mission-aligned deployments, including ChatGPT Enterprise, ChatGPT Gov, APIs, Codex, and emerging frontier capabilities. We partner with government leaders, operators, technologists, and policy stakeholders to translate cutting-edge AI into measurable mission impact while meeting government requirements for safety, reliability, security, compliance, and trust. Cyber is a critical government mission area. OpenAI's government cyber work brings together OpenAI for Government, Product, Research, Security, Product Policy, Legal, Global Affairs, and Communications to help trusted public-sector defenders responsibly use AI to protect government networks, critical infrastructure, and national-security systems. About the Role We are seeking a senior government cyber leader to serve as Head of Government Cyber Integration for OpenAI for Government. This role will integrate OpenAI's government cyber work across strategy, testing and evaluation, trusted access, deployment, policy, security, and external engagement. This is a matrix leadership role, not a replacement for line management. Product teams still own product roadmaps. Research and Safety still own model capability measurement and risk mitigation. Security still owns OpenAI's security posture and customer security requirements. Product Policy, Legal, and Global Affairs still