Senior Cyber Incident Responder Jobs

The Opportunity Our Adobe Cyber Defense Center seeks a skilled and curious Senior Cyber Incident Responder eager to tackle new technologies. You'll use your digital forensics and network-based investigation expertise in this crucial role to boost our incident response capabilities. Collaborating with a multinational team, you'll conduct thorough investigations and defend our enterprise against evolving cyber threats. If you thrive in a challenging environment and are ready to enhance our Incident Response program, we want to hear from you! What you will do Incident Response Experience : Respond to incidents to retrieve, analyze, and preserve critical data, utilizing forensics and network knowledge on a global scale. Conduct thorough host forensics, network forensics, log analysis, and malware triage to arrive at conclusive findings and support incident response investigations. Tool Development : Identify areas for improvement in processes and tooling related to response at scale. Develop and enhance scripts, tools, and methodologies to support the collection and analysis of data on a large scale, optimizing our incident investigation capabilities. Team Support and Mentorship: Provide support and guidance to other members of our CSIRT team, working closely with Staff level responders and management. Global Reporting and Coordination : Translate technical analysis into clear reports and coordinate response actions with team members globally. Assist in drafting detailed reports and assigning remediation recommend dations across internal and external organizations. Training and Presentations: Develop and present comprehensive training sessions and presentations for both technical and non-technical audiences. Global Collaboration : As an expert in the field, work closely with teams globally during incidents, including threat hunting,

The Security Incident Response Team (SIRT) plays a vital role in keeping Datadog safe from cybersecurity threats, defending the organization against threat actors, and maintaining the trust of our customers by ensuring their data remains protected. In this role, you will work closely with teams across Datadog to identify, triage, and respond to a wide range of threats, ensuring that we can contain any incidents as quickly as possible. You will also contribute to the tools and systems that make us more effective in our mission, and help ensure we have cross-functional learning from incidents to improve our defensive posture going forward. At Datadog, we place value in our office culture - the relationships and collaboration it builds, and the creativity it brings to the table. We operate as a hybrid workplace to ensure our Datadogs can create a work-life harmony that best fits them. What You’ll Do: Partner with our Cyber Threat Intelligence and Detection Engineering teams to identify threats to Datadog and ensure we have appropriate, accurate, high-signal detections for those threats. Triage escalated alerts to determine whether a security incident is occurring or may occur imminently. Respond to security incidents, whether as an incident commander or as an incident responder Make us more efficient through building tools and automations that eliminate repetitive processes Help us improve our overall security posture through post-incident reviews, tabletop and purple team exercises, and process/runbook improvements. Participate in a light on-call rotation. Who You Are: You have at least 5 years of experience in security incident response, threat hunting, security operations, cloud security, or other operational security domains. You’ve worked with at least one public cloud platform (AWS, GCP, or Azure) and cloud-native technologies like Kubernetes, Docker, or Terraform. You have a strong understanding of cloud-native threat actor TTPs and corresponding defensive contr

Since 2003, Entrata has evolved from a visionary, student-led startup into a global leader in AI-driven property management technology. Today, we power the industry's most essential operating system, serving owners and residents worldwide through a comprehensive suite of intelligent leasing, payment, and communication tools powered by cutting-edge AI. With a proven track record of sustained growth and a global team of more than 2,200 employees, we offer the rare combination of established stability and high-velocity innovation. Recognized by the Silicon Slopes Hall of Fame and the Utah Business Fast 50, Entrata fosters a culture of radical transparency and entrepreneurial energy. At Entrata, we create an environment where different perspectives are valued and respected. Those perspectives challenge assumptions, strengthen our decisions, and raise the bar as we reshape the global living experience through AI-powered solutions. The Senior Director, Cyber Defense is responsible for Entrata’s information security defenses, cyber defense strategy, and incident response program. This role leads the capabilities required to detect, investigate, contain, and recover from security events across Entrata’s technology environment. The Senior Director partners with leaders across Security, Technology, Engineering, Infrastructure, Product, Compliance, Legal, and Communications to strengthen Entrata’s security posture and operational resilience. This role establishes the processes, technology, communication channels, and cross-functional discipline necessary to respond effectively to cyber threats while ensuring appropriate coverage across regions and time zones. Responsibilities Define and execute Entrata’s cyber defense strategy and multi-year operational roadmap aligned with enterprise risk. Serve as Incident Commander for significant security incidents—coordinating technical response, triage, containment, eradication, recovery, and b

Lead OT Cybersecurity Engineer will spearhead the design, implementation and operations of cybersecurity controls across OT/ICS environments. This role acts as the technical authority for securing industrial automation systems, ensuring visibility, resilience, compliance and threat protection across plants and manufacturing operations. The position requires close collaboration with Plant Engineering, OEM vendors, IT Security teams, Cybersecurity team and SOC to strengthen OT cyber maturity, implement secure architectures and drive incident response readiness aligned with global standards (IEC 62443, NIST 800 82, ISO 27001, etc). Source: Adani Group | Job ID: 55796

The Head OT Cybersecurity is responsible for overseeing and leading the organization’s operational technology (OT) cybersecurity strategy, ensuring the security and integrity of critical infrastructure, industrial control systems (ICS), and operational environments. This senior leadership role will drive the development, implementation, and maintenance of OT cybersecurity policies, standards, and practices to protect OT assets from cyber threats. The Head OT Cybersecurity will also oversee incident response, risk management, and compliance efforts while collaborating with cross-functional teams to secure the organization’s OT environments. Source: Adani Group | Job ID: 52021

About the Team At DoorDash, including international brands Deliveroo and Wolt, we’re building the industry’s most scalable and reliable delivery network to support our three-sided marketplace of consumers, merchants, and Dashers. Global Cyber Defense is a highly talented and globally distributed team that covers response, intelligence, insider risk, threat hunting, automation, and detection engineering. We exist to keep our brands safe for the Dashers, merchants, and consumers who depend on us. Our mission is to detect, investigate, and respond to cyber threats with speed and precision, while continuously hardening our defenses through automation, AI, and cross-regional collaboration. About the Role The senior detection engineer is part of the larger detection engineering team that creates, tunes, maintains, and improves the detection lifecycle. This hands-on role is at the forefront of agentic detection engineering of a rapidly maturing security function. You’ll work closely with our data pipelines team, incident response, insider risk, and threat intelligence teams to make the most effective detection content to detect threats as quickly as possible. Detection at DoorDash spans more than the corporate estate. You’ll build coverage across cloud infrastructure, corporate endpoints and identity, and the marketplace itself - where consumer, merchant, and Dasher platforms create abuse and insider-risk patterns you won’t find in a typical enterprise SOC. We’re actively consolidating detection onto a modern data platform, so you’ll have real influence over what the pipeline looks like. This role reports to the Senior Manager, Cyber Defense located in the United States and participation in an on-call rotation is required for this role. You’re excited about this opportunity because you will… Conduct hands-on detection engineering for custom alerting, to include implementing risk-based analytics to reduce alert volumes and promote high-fidelity alert

SIXGEN’s mission is to deliver agile, mission-ready cybersecurity solutions that empower government and critical infrastructure organizations to stay ahead of advanced cyber threats. We combine innovation, deep expertise, and cutting-edge capabilities to uncover vulnerabilities, protect vital systems, and ensure operational superiority in an ever-evolving digital landscape. POSITION OVERVIEW Position: Senior Red Team Operator Job Type: Full Time Location: Hybrid (onsite 1/x week) -Washington D.C. Clearance Requirements: None Travel: Up to 10% ABOUT THE TEAM SIXGEN supports cyber and intelligence missions by serving government and commercial organizations as they overcome global cybersecurity challenges. You’ll work with our highly skilled operators conducting research and assessments based on real-world threats. You’ll simulate adversaries and malicious actors and report details and actionable findings on critical assets and infrastructures. Using innovative processes, tools, and techniques, you’ll predict and overcome cybersecurity vulnerabilities. Your successes will be supported by our diverse team of experienced, technical talent. WHAT YOU'LL DO Simulate real-world cyberattacks to assess and challenge the effectiveness of security controls and incident response capabilities. Conduct reconnaissance, exploitation, and post-exploitation activities using adversary tactics, techniques, and procedures (TTPs). Develop and use custom tools and methods to evade detection and maintain stealth during engagements. Collaborate with blue and purple teams to improve detection, response, and overall security posture. Document findings and deliver clear, actionable reports to technical and executive stakeholders. REQUIRED QUALIFICATIONS US Citizen with the ability to obtain a Public Trust clearance. CRTO certification. CRTL, OSEP, OSCE, OSEE, GXPN, and/or GPEN are preferred, but not required. Extensive Red Team Experience: Minimum 6 years of hands-on technical red te

Our Global Structure Deliveroo is now part of DoorDash, bringing together teams with even greater reach, scale, and ambition. Depending on your role, you may collaborate with teammates, systems, and leaders across DoorDash and Wolt. Together, we’re unlocking new possibilities as one global team. Join us in our mission to transform the way people shop and eat, where impact, innovation, and growth drive everything we do. Our Information Security team enables innovation at speed—securely. As digital guardians of DoorDash, Deliveroo, and Wolt, we safeguard our systems and the data of our employees, customers, riders, and partners. We defend against emerging cyber threats and embed security into every facet of the business. From building resilient defenses and responding to incidents to empowering teams with security knowledge, we are trusted partners protecting these global brands from the inside out. About the Role The Senior Security Operations Centre Specialist offers a unique opportunity to shape our global Security Operations strategy across a global footprint of DoorDash, Deliveroo, and Wolt. This role provides the platform to optimize our technology and AI investments while pioneering new methods to protect our data, people, and partners. As we expand, your specialist capabilities will be essential to our continued success. What you’ll be doing Work in a 24/7 global security operations centre, including scheduled night and weekend shifts. Lead the triage and investigation of security alerts, including phishing, malware, network attacks, security hygiene and privacy related incidents within specified SLAs. Mentor a team of SOC Specialists, providing the necessary guidance and feedback to deliver a best-in-class security service to the business. Lead the development and continuously improve operational documentation, processes and playbooks Build and manage autonomous AI runbooks to automate and scale our alert triage capabilities. Lead incident response and escala

About the Team DoorDash is one of the world's most trusted on-demand logistics platforms. The Global Safety and Security team exists to keep it that way, protecting our people, property, operations, brand, and reputation across all our markets. We manage risk and create value through agility, technology, and a people-first approach. Our DoorDash, Deliveroo, and Wolt brands now span more than 40 countries, dozens of offices, and tens of thousands of employees. Protective Services is the function accountable for the safety of the people we protect and the environments they live and work in, wherever they are. About the Role We are hiring a Senior Manager, Protective Services to lead protective operations, reporting to the Director, Protective Services. This is as much a build-and-execute mandate as a leadership one. You own the decisions that keep protection working, including how teams are staffed and assigned, how protection is set for a given person and situation, what we spend and which vendors we use, what people are trained to do, and how incidents get handled. This is a player-coach role, and the coaching half does not keep you off the field. You will work advances, travel with the people we protect, and take your turn in the rotation while setting the standard the team works to. Protection here is a service. It works when the people we protect can move through their lives with as little friction as we can manage, and when they trust the team enough to tell us what we need to know. You own protective operations, training and standards, vendor management, incident response, and converged physical-cyber protection. Protective teams, intelligence, and cybersecurity work on the same problem simultaneously, and detection and intelligence capabilities drive our protective posture. Success in the first year means a tight operating rhythm, training and qualification standards that hold up against the best protective programs, a team that is current and deployable

At Lyft, our purpose is to serve and connect. We aim to achieve this by cultivating a work environment where all team members belong and have the opportunity to thrive. Lyft connects people to transportation to change the way we live and get around our communities. Lyft’s engineering team is growing rapidly, and we are looking for Security Analysts to help us scale. Come be part of a team at Lyft focused on enabling and empowering engineering teams to deliver at scale. Our drivers and passengers entrust Lyft with their personal information and travel details to get where they're going and expect us to keep that data safe. Lyft's security team leads efforts across the company to ensure our systems are secure and worthy of our users' trust. Lyft Security builds systems to protect and defend infrastructure and services from cyber attacks. We consult with teams as they build and launch new products and features, proactively plans for the unexpected, and responds to incidents that occur. Our work has company wide impact and takes place at all levels of the stack, from infrastructure to web application security, as well as mobile apps, IT, bikes, scooters, etc. We believe in scaling security through engineering fundamentals, automation, and tooling. Check out our blog posts at https://eng.lyft.com/tagged/security to learn more about some of the things we’ve built. Our Incident Response team lives at the intersection of speed and precision. We own the full lifecycle of security incidents and stay ahead of the curve with our Threat Hunting program. We are looking for a Security Analyst who is passionate about refining feedback loops and executing proactive security actions. In this fast-paced, ever-evolving landscape, we prioritize knowledge sharing and mentorship. You will collaborate closely with Senior Analysts to sharpen your technical edge, ensuring that as our environment grows, your expertise grows with it. Responsibilities: Incident Response: Respond promptly

Our vision is to transform how the world uses information to enrich life for all . Micron Technology is a world leader in innovating memory and storage solutions that accelerate the transformation of information into intelligence, inspiring the world to learn, communicate and advance faster than ever. About Our Team The AI Security team is a newly established organization within Micron's Cyber Defense & Resilience (CDR) group, reporting directly to the Deputy CSO. We provide AI and automation engineering expertise across CDR's security functions, partnering with Security Operations, Governance Risk & Compliance, Third-Party Risk, Security Awareness, and Security Architecture teams to strengthen the security of a global environment supporting 50,000+ employees and 100,000+ devices! Position Overview We are seeking a Principal AI Security Architect to serve as the senior-most technical authority for AI security within Cyber Defense & Resilience! This role will define and drive AI security strategy, be responsible for AI threat modeling and governance, lead AI-related incident response efforts, and act as the primary advisor to executive leadership on the secure use, defense, and response to emerging AI technologies and threats. Responsibilities Develop and own the AI security strategy, threat model, and roadmap for Cyber Defense & Resilience. Establish quarterly priorities for AI security initiatives and provide strategic direction across multiple security functions. Define risk classification criteria and review high-risk AI agent architectures, including systems with customer data access, autonomous decision-making, and external system integrations. Act as the lead coordinator for AI-related cybersecurity incidents, partnering with ent

For more than 30 years, SonicWall has delivered a partner-first unified cybersecurity portfolio that helps SMBs, MSPs, and IT teams consolidate network security, endpoint security, security service edge (SSE), and threat response across hybrid environments. By bringing connected technology, real-time threat intelligence, automation, and expert services together, SonicWall helps organizations simplify security operations, achieve better security outcomes, and lower total cost of ownership. Backed by a global ecosystem of more than 17,000 partners, SonicWall delivers enterprise-grade protection built for SMB and mid-market realities. For more information, visit www.sonicwall.com or follow us on X, LinkedIn , Facebook , and Instagram . Roles & Responsibilities Design, deploy, and manage AWS cloud infrastructure and Kubernetes (EKS) environments. Build, maintain, and optimize GitLab CI/CD pipelines for automated deployments. Implement DevSecOps best practices, including infrastructure security, vulnerability management, and compliance controls. Monitor, troubleshoot, and improve platform reliability, performance, and scalability. Deploy and manage cloud-native applications, databases, and supporting services. Collaborate with development teams on architecture, deployment strategies, and production readiness. Drive infrastructure automation using Infrastructure as Code (Terraform). Support incident management, root cause analysis, and operational excellence initiatives. Mandatory Requirements 6+ years of hands-on DevOps/DevSecOps experience in production environments. Strong expertise with AWS services including EKS, EC2, S3, CloudFront, WAF, Lambda, and VPC. Minimum 3+ years of Kubernetes experience, preferably Amazon EKS. Hands-on experience building and managing GitLab CI/CD pipelines. Strong Linux administration and troubleshooting skills. Experience with Infrastructure as Code using Terraform. Proficiency in Python for automation and scriptin

What We Do: Cybercrime is growing, and more businesses are getting hit by threats that used to target only the biggest organizations. That pushes defenders like us to operate at the highest level, and it deepens our need for good people who want to make a meaningful impact. Founded in 2015 by former NSA cyber operators, Huntress is a remote-first team working to make enterprise-grade cybersecurity accessible to businesses of all sizes. We work closely with security teams and service providers protecting complex environments, often without the time or headcount to handle it all. That’s why we build our technology in-house and back it with a 24/7 human-led Security Operations Center (SOC). As a result, our platform is never disconnected from the experts who manage it, ensuring our customers' protection. Huntress now secures more than 5M endpoints and 16M identities worldwide. Those numbers keep growing because more businesses rely on us to help carry the load and operate with more confidence. Every day, you can see that commitment in how we stand with our customers and how we show up for each other. Reports to: Senior Manager, Security Operations Center Location: Remote Australia Compensation Range: $110,000 to $140,000 AUD base plus bonus and equity What You’ll Do: You’re a hands-on SOC Analyst who thrives on detecting and responding to cybercrime. You’ll triage Active Hands-On Keyboard intrusions, track attackers through networks, and help remove them before they achieve their objectives. You’ll contextualise endpoint telemetry, analyse logs, leverage forensic artifacts, and understand malware to uncover the full scope of an intrusion. You give a $ht about protecting customers and improving how the team operates, taking ownership of investigations and acting on the information available. You bring Warrior Spirit to complex incidents, staying resilient and composed under pressure. You are Outcome-Obsessed, measuring your work by the threats contained, customers

Location: Frankfurt, Düsseldorf, Berlin, München (Hybrid) | Practice Area: Finance, Risk, Regulatory & Financial Crime | Type: Permanent Gestalte mit uns die digitale und operationale Resilienz von Finanzinstituten – von DORA und IKT-Risikomanagement bis hin zu Third Party Risk und Operational Resilience. Die Rolle Als (Senior) Consultant* – Operational & Cyber Resilience unterstützt Du unsere Kundinnen und Kunden aus der Finanzindustrie bei der Umsetzung regulatorischer Anforderungen, insbesondere rund um den Digital Operational Resilience Act (DORA) und den einschlägigen EBA Guidelines. Du arbeitest an der Schnittstelle von Regulatorik, IKT-Risikomanagement, Operational Resilience und IT Governance und begleitest unsere Kunden von der Analyse bestehender Strukturen bis zur nachhaltigen Umsetzung. Dabei beschäftigst Du Dich unter anderem mit IKT-Kontrollframeworks, Incident Management, Third Party Risk Management sowie Auslagerungsmanagement. Du nutzt zudem freigegebene AI-Tools, Automatisierung und AI-enabled Workflows dort, wo sie Analysen, Qualität und Produktivität sinnvoll verbessern – stets unter Berücksichtigung menschlicher Beurteilung, angemessener Kontrollen und Responsible-AI-Vorgaben. Deine Aufgaben Berate Finanzinstitute bei der Umsetzung und Weiterentwicklung von DORA-Anforderungen sowie beim Aufbau einer nachhaltigen Digital Operational Resilience. Analysiere und optimiere IKT-/IT-Risikomanagement, IT Governance sowie IKT-/IT-Kontrollframeworks und unterstütze bei der Entwicklung geeigneter Governance- und Kontrollstrukturen. Unterstütze bei Third Party Risk Management, ICT Third Party Risk, IT Supplier Risk und Auslagerungsmanagement – von Risikoanalysen bis zur Implementierung belastbarer Steuerungsprozesse. Begleite unsere Kunden bei ICT Incident Management und Major ICT Incidents , einschließlich der Weiterentwicklung relevanter Prozesse, Kontrollen und regulatorischer

Location: Frankfurt, Düsseldorf, Berlin, München (Hybrid) | Practice Area: Finance, Risk, Regulatory & Financial Crime | Type: Permanent Gestalte mit uns die digitale und operationale Resilienz von Finanzinstituten – von DORA und IKT-Risikomanagement bis hin zu Third Party Risk und Operational Resilience. Die Rolle Als (Senior) Consultant* – Operational & Cyber Resilience unterstützt Du unsere Kundinnen und Kunden aus der Finanzindustrie bei der Umsetzung regulatorischer Anforderungen, insbesondere rund um den Digital Operational Resilience Act (DORA) und den einschlägigen EBA Guidelines. Du arbeitest an der Schnittstelle von Regulatorik, IKT-Risikomanagement, Operational Resilience und IT Governance und begleitest unsere Kunden von der Analyse bestehender Strukturen bis zur nachhaltigen Umsetzung. Dabei beschäftigst Du Dich unter anderem mit IKT-Kontrollframeworks, Incident Management, Third Party Risk Management sowie Auslagerungsmanagement. Du nutzt zudem freigegebene AI-Tools, Automatisierung und AI-enabled Workflows dort, wo sie Analysen, Qualität und Produktivität sinnvoll verbessern – stets unter Berücksichtigung menschlicher Beurteilung, angemessener Kontrollen und Responsible-AI-Vorgaben. Deine Aufgaben Berate Finanzinstitute bei der Umsetzung und Weiterentwicklung von DORA-Anforderungen sowie beim Aufbau einer nachhaltigen Digital Operational Resilience. Analysiere und optimiere IKT-/IT-Risikomanagement, IT Governance sowie IKT-/IT-Kontrollframeworks und unterstütze bei der Entwicklung geeigneter Governance- und Kontrollstrukturen. Unterstütze bei Third Party Risk Management, ICT Third Party Risk, IT Supplier Risk und Auslagerungsmanagement – von Risikoanalysen bis zur Implementierung belastbarer Steuerungsprozesse. Begleite unsere Kunden bei ICT Incident Management und Major ICT Incidents , einschließlich der Weiterentwicklung relevanter Prozesse, Kontrollen und regulatorischer