Organizations across the United States are rapidly expanding their cybersecurity teams, creating strong demand for senior incident response analyst remote jobs. Currently, 450 open positions are available for professionals ready to protect critical infrastructure from evolving threats. This remote opportunity allows skilled analysts to contribute from anywhere in the country while joining a fast-growing security operations network.
The ideal candidate brings deep expertise in threat detection, forensic analysis, and incident containment, along with hands-on experience using SIEM platforms, endpoint detection tools, and network traffic analysis. Strong knowledge of malware analysis, digital forensics, and regulatory compliance frameworks such as NIST and ISO 27001 is highly valued. Employers seeking to hire a senior incident response analyst also look for excellent communication skills, since these professionals must translate complex technical findings into clear guidance for stakeholders during high-pressure security incidents.
Remote work has become the standard arrangement for senior incident response analyst positions, as companies build distributed security operations centers capable of monitoring threats around the clock. The U.S. market shows sustained hiring momentum in this field, driven by rising cyberattack volumes and stricter data protection regulations. Flexible remote setups allow analysts to collaborate across time zones while maintaining rapid response capabilities.
If you're ready to advance your career in cybersecurity, exploring senior incident response analyst vacancies is a smart next step. Global Work AI connects talented professionals with organizations seeking dedicated security experts nationwide. Browse current openings today and take the next step toward a rewarding remote career in cybersecurity.
TTI
Administer and maintain enterprise data security platforms, monitor platform health, and troubleshoot issues. Develop and enforce data discovery, classification, and protection policies. Identify unauthorized data storage and coordinate remediation efforts.
remote, United States$120k – $140k/yrFull TimeSenior (5+ years)
OpenAI
Lead the response to complex security incidents, establishing priorities and coordinating technical work streams. Drive containment and recovery decisions, maintain a decision log, and communicate incident status to stakeholders.
remote, United StatesFull TimeJunior (<2 years)
Optiv
Conduct deep analysis for client investigations using various data sources and monitoring tools. Perform security monitoring and incident response, detect incidents through proactive hunting, and document incident response activities.
remote, United StatesFull TimeSenior (5+ years)
Dragos
Lead incident response engagements for Operational Technology (OT) customers, including triage, investigations, and threat hunts. Conduct post-incident reviews and integrate lessons learned into methodologies.
remote, United States$170k/yrFull TimeLead / Manager
McKesson
Monitor and analyze security alerts across enterprise environments, serving as a senior escalation point for incidents. Support incident investigation, containment, eradication, and recovery processes. Improve detection logic and incident-response processes based on threat intelligence.
remote, Scottsdale, AZ, United States$123k – $204k/yrFull TimeSenior (5+ years)
TTI, Inc.
Administer and maintain enterprise data security platforms, monitor platform health, and troubleshoot issues. Develop data discovery, classification, and protection policies while coordinating remediation of sensitive data.
remote, United States$120k – $140k/yrFull TimeSenior (5+ years)
BCS365
Monitor and investigate security events, assist with incident response, review security controls, and produce documentation and reports. Collaborate with teams to identify and mitigate security risks and vulnerabilities across environments.
remote, United States$63k – $73k/yrFull TimeMiddle (2-4 years)phia, LLC
Respond to and manage cybersecurity incidents, focusing on APT and FIN threat actors. Lead incident response efforts, mentor junior analysts, and author detailed incident reports.
remote, United StatesFull TimeSenior (5+ years)
OppFi
Monitor security alerts from various tools, assist in incident triage, and execute security incident response playbooks. Contribute to documentation and tracking of security incidents, support vulnerability management, and assist in the configuration of SIEM alerts.
remote, United States$102k – $154k/yrFull TimeSenior (5+ years)
Mercury
Lead fraud incident management across all Mercury products, mobilizing incident response and coordinating with cross-functional teams. Draft incident reports and memos for bank partners and internal governance, ensuring accurate and timely responses.
remote, United States$139k – $193k/yrFull TimeSenior (5+ years)
Axiom Path
Investigate security alerts and potential cyber incidents, performing detailed incident investigations and supporting containment efforts. Conduct proactive threat hunting and analyze adversary tactics using MITRE ATT&CK and Cyber Kill Chain frameworks.
remote, NY, United StatesFull TimeSenior (5+ years)
Agile Defense
Monitor, investigate, and respond to cybersecurity incidents. Analyze security alerts, conduct forensic investigations, and implement containment and recovery measures.
remote, United States$100k – $125k/yrFull TimeSenior (5+ years)
Reinsurance Group of America, Incorporated
Lead enterprise incident response and cyber crisis engagements from detection through recovery. Direct investigations across various environments including Windows, Linux, and cloud. Perform advanced threat hunting and compromise assessments using SIEM and EDR tools.
remote, MO, United States$127k – $189k/yrFull TimeLead / Manager
MBL Technologies
Respond to and investigate cybersecurity incidents, analyze security events related to APT and FIN actors, and respond to cloud-based threats. Utilize Microsoft Defender EDR and other tools for threat identification and containment.
remote, Washington, DC, United StatesFull TimeSenior (5+ years)
Idaho Power Company
Conduct analysis, technical design, and development of security architecture. Participate in incident analysis, solution development, and implementation coordination. Perform cyber risk assessments and evaluate security tools such as SIEM and IPS.
remote, LA, United States$97k – $140k/yrFull TimeSenior (5+ years)
Epic Games
Lead investigations and incident response for security alerts across various environments. Develop and tune detection logic to improve signal-to-noise ratio and minimize alert fatigue. Automate repetitive analyst tasks and create operational metrics to enhance SOC efficiency.
remote, United StatesFull TimeSenior (5+ years)
Affirm
Lead security incidents and investigations from assessment to recovery. Serve as incident commander for major events, coordinating technical and cross-functional teams. Guide investigations and root-cause analyses, ensuring corrective actions are implemented.
remote, United States$236k – $325k/yrFull TimeSenior (5+ years)
Bowling Green State University
Design and implement security architecture, lead incident response efforts, evaluate security tools, and draft enterprise security standards. Investigate security incidents, document findings, and collaborate with law enforcement as needed.
remote, OH, United States$77k – $119k/yrFull TimeSenior (5+ years)
Trapp Technology
Monitor security alerts and events to identify, contain, and remediate security incidents. Investigate suspicious activity using SIEM and other tools, perform malware analysis, and develop operational procedures for incident response.
remote, AZ, United States$56k – $75k/yrFull TimeMiddle (2-4 years)
Surefire Cyber
Conduct advanced forensic analysis to identify the scope and impact of security incidents, including malware analysis and reverse engineering. Lead forensic investigations on small to medium cases, guide clients through the incident response lifecycle, and provide mentorship to junior team members.
remote, United StatesFull TimeSenior (5+ years)
Experian
Lead enterprise-wide response to high-risk cybersecurity incidents, coordinating cross-functional efforts and driving containment, eradication, recovery, and resolution. Provide executive incident leadership, delivering updates to senior leaders and maintaining accurate incident documentation.
remote, United States$153k – $276k/yrFull TimeSenior (5+ years)
frontdoor, Inc.
Conduct full-cycle incident response activities including alert triage, investigation, containment, remediation, and reporting. Manage sensitive cases with proper approvals and confidentiality.
remote, United States$133k – $155k/yrFull TimeSenior (5+ years)
Centene Corporation
Lead and coordinate incident response efforts across multiple business units. Command large-scale cyber incidents, ensuring compliance with security policies. Collaborate with Information Security Architects and integrate third-party monitoring services into internal communications.
remote, United States$122k – $225k/yrFull TimeLead / Manager
PrizePicks
Lead the design and improvement of incident response playbooks, manage detection and monitoring through SIEM, and conduct threat hunting for malicious activities. Strengthen digital forensics capabilities and automate workflows for alerting and triage.
remote, United States$160k – $175k/yrFull TimeSenior (5+ years)
Honeywell Aerospace
Lead incident response efforts, conducting detailed analysis of cybersecurity data. Engage in triage activities to identify threats and vulnerabilities, mentor junior analysts, and develop Root Cause and Corrective Action Reports.
remote, United States$164k – $236k/yrFull TimeLead / Manager
Beazley Security, LLC
Lead and coordinate incident response efforts for clients, identifying, containing, and mitigating security incidents. Prepare detailed incident reports with findings and recommendations.
remote, United StatesFull TimeJunior (<2 years)
Booz Allen Hamilton
Drive business development and sales processes for the Incident Response business, engaging stakeholders and establishing strategic partner relationships. Identify, develop, and close new growth opportunities while contributing to innovative principles and solutions.
remote, AL, United States$143k – $266k/yrFull TimeSenior (5+ years)
Elastic
Review and respond to alerts from the Elastic Detection Engine and other monitoring sources. Conduct analysis on SIEM and endpoint logs during investigations. Oversee response activities across teams to ensure comprehensive remediation of security gaps.
remote, United States$133k – $253k/yrFull TimeSenior (5+ years)
Aprio
Monitor alerts and incidents across client environments using Microsoft Sentinel and Defender XDR. Triage incidents, investigate suspicious activities, and escalate confirmed incidents as necessary. Write and tune KQL queries for threat hunting and detection rule development.
remote, United States$94k – $153k/yrFull TimeSenior (5+ years)
Huron
Coordinate end-to-end incident response for security and data incidents, driving investigations from detection to resolution. Manage communication with stakeholders across Legal, HR, IT, and business units, ensuring alignment and timely updates.
remote, United States$140k – $228k/yrFull TimeSenior (5+ years)
GitHub, Inc.
Develop and implement solutions for product security incidents, utilizing data analysis and forensics techniques. Identify automation opportunities to enhance incident response efficiency and maintain automation scripts.
remote, United States$124k – $329k/yrFull TimeSenior (5+ years)Axiom Path
Investigate cybersecurity alerts and suspicious activities to assess threats and coordinate responses. Conduct detailed incident investigations and proactive threat hunting across enterprise systems.
remote, United StatesFull TimeSenior (5+ years)
DecisionPoint | Cortek
Analyze ACAS vulnerability-scan results, prioritize vulnerabilities, and coordinate remediation actions across teams. Track compliance with IAVAs and IAVM requirements, maintain POA&Ms, and escalate unresolved vulnerabilities.
remote, IL, United StatesFull TimeSenior (5+ years)Everforth ECS
Manage daily SOC activities, including incident response operations across Tier I, II, and III. Direct containment, eradication, and recovery efforts during security incidents, serving as incident commander. Lead post-incident reviews and ensure compliance with NIST SP 800-61.
remote, United States$140k – $160k/yrFull TimeLead / Manager
Quorum Cyber
Lead complex cyber security incident investigations, performing advanced forensics and threat analysis. Collaborate with SOC, MDR, and Threat Intelligence teams to manage incidents effectively.
remote, United StatesFull TimeSenior (5+ years)
FRSecure
Conduct incident response investigations, including forensic reviews and triage for cyber-attack victims. Document findings and create reports, while advising clients on recovery and remediation steps.
remote, AZ, United States$95k – $125k/yrFull TimeMiddle (2-4 years)
Snowflake
Join a high-impact team to scale security by deploying and refining autonomous AI agents for incident response. Lead security investigations as Incident Commander, handle escalations, and build automation pipelines to enhance incident response capabilities.
remote, United StatesFull TimeJunior (<2 years)
HealthEdge
Coordinate and manage Major Incident process activities, ensuring timely restoration of services. Support Major Incident Management reporting, drive standard execution of processes, and communicate with stakeholders about incident status.
remote, United States$115k – $130k/yrFull TimeSenior (5+ years)
IT Solutions Consulting LLC
Monitor security alerts and metrics, conduct endpoint security activities, and manage responses to complex security incidents. Perform vulnerability assessments, analyze results, and provide recommendations to reduce risk exposure.
remote, United StatesFull TimeSenior (5+ years)
FHI 360
Oversee data analytics and visualization for emergency response activities, ensuring quality data collection and reporting. Develop dashboards and analytics products to support decision-making, and provide technical direction to project staff.
remote, United States$86k – $116k/yrFull TimeSenior (5+ years)10,000,000+ more jobs available!
