[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"seo-content-skill-incident-response-us":3,"job-search-\u002Fen-us\u002Fjobs-by-skill\u002Fincident-response":8,"skill-page-filters-\u002Fen-us\u002Fjobs-by-skill\u002Fincident-response":373,"featured-jobs-\u002Fen-us\u002Fjobs-by-skill\u002Fincident-response":501},{"image_path":4,"content_de":5,"content_en":5,"composite_key":6,"last_updated":7},"\u002Fimages\u002Fskill\u002Fincident-response.webp",null,"skill:incident-response:us","2026-08-17T09:05:18.228341+02:00",{"total":9,"jobs":10},8,[11,123,156,202,238,262,289,341],{"id":12,"slug":13,"title":14,"raw_title":5,"is_featured":15,"company":16,"raw_hiringOrganization_logo_url":5,"processed_city_gmaps":19,"processed_country_iso_code_gmaps":21,"processed_home_office":23,"processed_salary_min":24,"processed_salary_max":25,"processed_salary_currency":26,"processed_salary_source":27,"processed_working_hours":28,"processed_employment_types":30,"processed_it_skills":31,"processed_it_skills_labels":34,"processed_job_expertise_skills":102,"processed_job_expertise_skills_labels":103,"max_cpc":121,"actual_cpc":122},83760,"sr-staff-software-engineer-ai-agent-platform-government-employees-insurance-company","Sr. Staff Software Engineer, AI Agent Platform",false,{"name":17,"slug":18,"logo_url":5},"Government Employees Insurance Company","government-employees-insurance-company",[20],"New York",[22],"US","hybrid",130000,300000,"USD","estimated",[29],"FULL_TIME","permanent",{"go":32,"aws":33,"llm":33,"mcp":33,"rag":33,"clis":33,"dbos":33,"java":32,"sdks":33,"slos":32,"azure":33,"ci\u002Fcd":32,"genai":33,"kafka":33,"vespa":33,"python":32,"datadog":33,"grafana":33,"on-call":32,"portals":33,"restate":33,"langfuse":33,"temporal":33,"game days":33,"langgraph":33,"langsmith":33,"api design":32,"braintrust":33,"kubernetes":32,"opensearch":33,"prometheus":33,"sandboxing":33,"concurrency":32,"postmortems":32,"scalability":32,"arize phoenix":33,"data modeling":32,"error budgets":33,"observability":32,"opentelemetry":33,"feature stores":33,"azure ai search":33,"fault tolerance":32,"claude agent sdk":33,"event processing":33,"knowledge graphs":33,"prompt injection":33,"agentic workflows":33,"capacity planning":32,"chaos engineering":33,"durable execution":33,"incident response":32,"openai agents sdk":33,"aws step functions":33,"azure durable task":33,"performance tuning":32,"distributed systems":32,"streaming ingestion":33,"evaluation frameworks":33,"multi-tenant services":33,"supply chain security":33,"workflow orchestration":33,"monitoring and alerting":32,"amazon bedrock agentcore":33,"microsoft agent framework":33,"event-driven architectures":33,"microsoft foundry agent service":33},4,3,[35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101],"Python","Java","Go","Kubernetes","CI\u002FCD","Distributed Systems","API Design","Data Modeling","Concurrency","Fault Tolerance","Scalability","Observability","Monitoring and Alerting","On-call","Incident Response","Postmortems","SLOs","Capacity Planning","Performance Tuning","Temporal","Restate","DBOS","Azure Durable Task","AWS Step Functions","Kafka","LangGraph","Microsoft Agent Framework","OpenAI Agents SDK","Claude Agent SDK","Azure AI Search","OpenSearch","Vespa","OpenTelemetry","Prometheus","Grafana","Datadog","Langfuse","LangSmith","Braintrust","Arize Phoenix","Azure","AWS","Microsoft Foundry Agent Service","Amazon Bedrock AgentCore","MCP","RAG","LLM","GenAI","Agentic Workflows","Durable Execution","Workflow Orchestration","Event-driven Architectures","Multi-tenant Services","SDKs","CLIs","Portals","Streaming Ingestion","Event Processing","Knowledge Graphs","Feature Stores","Evaluation Frameworks","Prompt Injection","Sandboxing","Supply Chain Security","Error Budgets","Chaos Engineering","Game Days",{"ai\u002Fml":33,"tech lead":32,"governance":33,"ai security":33,"rag systems":33,"architecture":32,"sre practices":33,"system design":32,"data pipelines":33,"cloud platforms":33,"agentic harnesses":33,"analytics systems":33,"genai applications":33,"backend engineering":32,"software engineering":32,"evaluation frameworks":33,"production operations":32,"reliability engineering":32},[104,105,106,107,108,109,110,111,112,113,114,115,116,95,117,118,119,120],"Software Engineering","Backend Engineering","Tech Lead","System Design","Architecture","Production Operations","Reliability Engineering","AI\u002FML","GenAI Applications","Agentic Harnesses","RAG Systems","Data Pipelines","Analytics Systems","SRE Practices","Cloud Platforms","AI Security","Governance",1,1.5,{"id":124,"slug":125,"title":126,"raw_title":5,"is_featured":15,"company":127,"raw_hiringOrganization_logo_url":5,"processed_city_gmaps":130,"processed_country_iso_code_gmaps":132,"processed_home_office":23,"processed_salary_min":133,"processed_salary_max":134,"processed_salary_currency":26,"processed_salary_source":27,"processed_working_hours":135,"processed_employment_types":30,"processed_it_skills":136,"processed_it_skills_labels":137,"processed_job_expertise_skills":144,"processed_job_expertise_skills_labels":145,"max_cpc":121,"actual_cpc":122},75920,"cyber-security-technical-advisor-grc-avp-mufg-bank-ltd-2","Cyber Security Technical Advisor (GRC) – AVP",{"name":128,"slug":129,"logo_url":5},"MUFG Bank, Ltd.","mufg-bank-ltd",[131],"Jersey City",[22],90000,153000,[29],{"data security":32,"cloud security":32,"log generation":32,"incident response":32,"configuration management":32,"identity access management":32,"secure software development lifecycle":32},[138,139,140,141,142,49,143],"Cloud Security","Identity Access Management","Data Security","Configuration Management","Log Generation","Secure Software Development Lifecycle",{"it audit":33,"control testing":32,"risk management":32,"control assessment":32,"banking regulations":32,"information security":32,"process documentation":32,"regulatory compliance":32,"cloud security practices":32,"security risk assessment":32},[146,147,148,149,150,151,152,153,154,155],"Risk Management","Information Security","IT Audit","Regulatory Compliance","Control Assessment","Security Risk Assessment","Control Testing","Process Documentation","Banking Regulations","Cloud Security Practices",{"id":157,"slug":158,"title":159,"raw_title":5,"is_featured":15,"company":160,"raw_hiringOrganization_logo_url":5,"processed_city_gmaps":161,"processed_country_iso_code_gmaps":163,"processed_home_office":23,"processed_salary_min":164,"processed_salary_max":165,"processed_salary_currency":26,"processed_salary_source":27,"processed_working_hours":166,"processed_employment_types":30,"processed_it_skills":167,"processed_it_skills_labels":169,"processed_job_expertise_skills":181,"processed_job_expertise_skills_labels":182,"max_cpc":121,"actual_cpc":122},61548,"incident-response-planning-and-operations-analyst-mufg-bank-ltd-2","Incident Response Planning and Operations, Analyst",{"name":128,"slug":129,"logo_url":5},[162],"Tempe",[22],85000,123000,[29],{"nist":32,"devops":168,"mitre att&ck":32,"cybersecurity":32,"cloud security":33,"troubleshooting":33,"data correlation":33,"incident response":32,"security monitoring":33,"security operations":33,"threat intelligence":33,"application security":33,"ai assisted incident response":33},2,[170,49,171,138,172,173,174,175,176,177,178,179,180],"Cybersecurity","Threat Intelligence","AI Assisted Incident Response","DevOps","Application Security","Security Monitoring","Data Correlation","Troubleshooting","Security Operations","NIST","MITRE ATT&CK",{"documentation":32,"cyber wargaming":32,"risk management":33,"threat modeling":33,"network security":33,"after-action review":32,"presentation skills":32,"security governance":33,"strategic wargaming":32,"stakeholder engagement":32,"security risk management":33,"tabletop exercise design":32,"red\u002Fblue team simulations":33,"enterprise risk management":33,"incident response planning":32,"information security audits":33,"information security reviews":33,"incident readiness assessment":32,"threat and vulnerability management":33,"information security risk assessments":33},[183,184,185,186,187,146,188,189,190,191,192,193,194,195,196,197,198,199,200,201],"Tabletop Exercise Design","Red\u002FBlue Team Simulations","Strategic Wargaming","Incident Readiness Assessment","After-Action Review","Security Governance","Security Risk Management","Network Security","Threat and Vulnerability Management","Information Security Audits","Information Security Reviews","Information Security Risk Assessments","Enterprise Risk Management","Incident Response Planning","Cyber Wargaming","Threat Modeling","Stakeholder Engagement","Presentation Skills","Documentation",{"id":203,"slug":204,"title":205,"raw_title":5,"is_featured":15,"company":206,"raw_hiringOrganization_logo_url":5,"processed_city_gmaps":209,"processed_country_iso_code_gmaps":210,"processed_home_office":211,"processed_salary_min":212,"processed_salary_max":213,"processed_salary_currency":26,"processed_salary_source":27,"processed_working_hours":214,"processed_employment_types":30,"processed_it_skills":215,"processed_it_skills_labels":216,"processed_job_expertise_skills":224,"processed_job_expertise_skills_labels":225,"max_cpc":121,"actual_cpc":122},69830,"cybersecurity-regulatory-lead-bbva-red-exterior-de-oficinas","Cybersecurity Regulatory Lead",{"name":207,"slug":208,"logo_url":5},"BBVA RED EXTERIOR DE OFICINAS","bbva-red-exterior-de-oficinas",[20],[22],"onsite",185000,200000,[29],{"cloud security":33,"data protection":33,"network security":33,"incident response":33,"secure development":33,"security monitoring":33,"third-party security":33,"technology resilience":33,"vulnerability management":33,"privileged access management":33,"identity and access management":33},[217,218,219,175,49,190,220,138,221,222,223],"Identity and Access Management","Privileged Access Management","Vulnerability Management","Data Protection","Third-Party Security","Secure Development","Technology Resilience",{"gap assessment":32,"control mapping":32,"risk management":32,"policy development":32,"management reporting":32,"regulatory readiness":32,"remediation tracking":32,"regulatory compliance":32,"internal audit coordination":32,"regulatory frameworks knowledge":32,"cybersecurity control assessments":32,"regulatory examinations management":32,"cybersecurity regulatory engagement":32,"financial services regulatory environment":32},[226,227,228,229,149,146,230,231,232,233,234,235,236,237],"Cybersecurity Regulatory Engagement","Regulatory Examinations Management","Internal Audit Coordination","Cybersecurity Control Assessments","Policy Development","Control Mapping","Gap Assessment","Regulatory Readiness","Remediation Tracking","Management Reporting","Regulatory Frameworks Knowledge","Financial Services Regulatory Environment",{"id":239,"slug":240,"title":241,"raw_title":5,"is_featured":15,"company":242,"raw_hiringOrganization_logo_url":5,"processed_city_gmaps":243,"processed_country_iso_code_gmaps":244,"processed_home_office":23,"processed_salary_min":245,"processed_salary_max":246,"processed_salary_currency":26,"processed_salary_source":27,"processed_working_hours":247,"processed_employment_types":30,"processed_it_skills":248,"processed_it_skills_labels":249,"processed_job_expertise_skills":254,"processed_job_expertise_skills_labels":255,"max_cpc":121,"actual_cpc":122},49157,"cyber-security-technical-grc-vp-mufg-bank-ltd","Cyber Security Technical GRC – VP",{"name":128,"slug":129,"logo_url":5},[131],[22],151000,203000,[29],{"iam":32,"oracle":33,"auditing":32,"secure sdlc":32,"data security":32,"cloud security":32,"log generation":32,"incident response":32,"configuration management":32,"security risk assessment":32},[138,250,140,141,142,49,151,251,252,253],"IAM","Secure SDLC","Auditing","Oracle",{"audit":32,"compliance":32,"governance":32,"risk management":32,"policy management":32,"executive reporting":32,"regulatory knowledge":32,"cyber risk quantification":32},[146,120,256,257,258,259,260,261],"Compliance","Policy Management","Cyber Risk Quantification","Regulatory Knowledge","Executive Reporting","Audit",{"id":263,"slug":264,"title":265,"raw_title":5,"is_featured":15,"company":266,"raw_hiringOrganization_logo_url":269,"processed_city_gmaps":270,"processed_country_iso_code_gmaps":272,"processed_home_office":23,"processed_salary_min":133,"processed_salary_max":24,"processed_salary_currency":26,"processed_salary_source":27,"processed_working_hours":273,"processed_employment_types":30,"processed_it_skills":274,"processed_it_skills_labels":275,"processed_job_expertise_skills":284,"processed_job_expertise_skills_labels":285,"max_cpc":121,"actual_cpc":122},44880,"security-engineer-celtic-bank","Security Engineer",{"name":267,"slug":268,"logo_url":5},"Celtic Bank","celtic-bank","https:\u002F\u002Fworkablehr.s3.amazonaws.com\u002Fuploads\u002Faccount\u002Flogo\u002F193267\u002Flogo",[271],"Salt Lake City",[22],[29],{"mfa":33,"casb":33,"sase":33,"sspm":33,"rapid7":32,"dashlane":33,"crowdstrike":32,"asset inventory":33,"incident response":33},[276,277,278,279,280,281,282,283,49],"Rapid7","CrowdStrike","Dashlane","SASE","CASB","SSPM","MFA","Asset Inventory",{"cloud security":33,"network security":33,"identity security":33,"endpoint protection":32,"regulatory compliance":33,"attack surface management":32},[286,287,288,190,138,149],"Attack Surface Management","Endpoint Protection","Identity Security",{"id":290,"slug":291,"title":292,"raw_title":5,"is_featured":15,"company":293,"raw_hiringOrganization_logo_url":5,"processed_city_gmaps":296,"processed_country_iso_code_gmaps":298,"processed_home_office":211,"processed_salary_min":24,"processed_salary_max":299,"processed_salary_currency":26,"processed_salary_source":27,"processed_working_hours":300,"processed_employment_types":30,"processed_it_skills":301,"processed_it_skills_labels":302,"processed_job_expertise_skills":326,"processed_job_expertise_skills_labels":327,"max_cpc":121,"actual_cpc":122},57190,"manager-security-incident-response-5h0-hub-international-limited","Manager, Security Incident Response",{"name":294,"slug":295,"logo_url":5},"Hub International Limited","hub-international-limited",[297],"Chicago",[22],150000,[29],{"aws":32,"cdn":32,"dns":32,"edr":32,"gcp":32,"waf":32,"http":32,"o365":32,"saml":32,"sans":32,"siem":32,"soar":32,"azure":32,"entra":32,"oauth":32,"python":32,"tcp\u002Fip":32,"powershell":32,"nist 800-61":32,"log analysis":32,"shell scripting":32,"digital forensics":32,"evidence handling":32,"incident response":32,"timeline reconstruction":32,"microsoft active directory":32},[303,35,304,305,306,307,308,309,310,311,76,75,312,313,314,315,316,317,318,319,320,321,322,323,324,325],"PowerShell","Shell scripting","TCP\u002FIP","DNS","CDN","HTTP","WAF","OAuth","SAML","GCP","Microsoft Active Directory","Entra","O365","SIEM","EDR","SOAR","Digital forensics","Incident response","Log analysis","Timeline reconstruction","Evidence handling","NIST 800-61","SANS",{"threat hunting":32,"kpi development":32,"team management":32,"project management":32,"tabletop exercises":32,"root cause analysis":32,"forensic methodology":32,"playbook development":32,"technical archeology":32,"detection engineering":32,"security policy compliance":32,"escalation framework design":32,"incident response management":32},[328,329,330,331,332,333,334,335,336,337,338,339,340],"Incident Response Management","Detection Engineering","Threat Hunting","Forensic Methodology","Root Cause Analysis","KPI Development","Team Management","Project Management","Security Policy Compliance","Technical Archeology","Playbook Development","Escalation Framework Design","Tabletop Exercises",{"id":342,"slug":343,"title":344,"raw_title":5,"is_featured":15,"company":345,"raw_hiringOrganization_logo_url":5,"processed_city_gmaps":346,"processed_country_iso_code_gmaps":347,"processed_home_office":23,"processed_salary_min":348,"processed_salary_max":349,"processed_salary_currency":26,"processed_salary_source":27,"processed_working_hours":350,"processed_employment_types":30,"processed_it_skills":351,"processed_it_skills_labels":352,"processed_job_expertise_skills":364,"processed_job_expertise_skills_labels":365,"max_cpc":121,"actual_cpc":122},49160,"cybersecurity-control-testing-lead-vp-mufg-bank-ltd","Cybersecurity Control Testing Lead, VP",{"name":128,"slug":129,"logo_url":5},[131],[22],147000,194000,[29],{"ai models":32,"encryption":32,"cybersecurity":32,"cloud security":32,"secure delivery":32,"network security":32,"change management":32,"incident response":32,"release management":32,"backup and recovery":32,"deployment controls":32,"logging and monitoring":32,"infrastructure security":32,"configuration management":32,"vulnerability management":32,"production change governance":32,"identity and access management":32,"software development lifecycle":32},[138,170,353,217,219,354,355,356,190,141,49,357,358,359,360,361,362,363],"Infrastructure Security","Logging and Monitoring","Encryption","Backup and Recovery","Change Management","Software Development Lifecycle","Secure Delivery","Deployment Controls","Release Management","Production Change Governance","AI Models",{"it audit":32,"control design":32,"control testing":32,"technology risk":32,"cybersecurity grc":32,"industry frameworks":32,"management reporting":32,"risk-based assurance":32,"regulatory compliance":32,"evidence-based testing":32,"operating effectiveness":32},[152,366,148,367,368,369,370,371,235,149,372],"Risk-based Assurance","Technology Risk","Cybersecurity GRC","Control Design","Operating Effectiveness","Evidence-based Testing","Industry Frameworks",{"industry":374,"employment_type":388,"expertise_skills":391,"it_skills":444,"salary_currency":497,"processed_working_hours":499},[375,379,382,385],{"key":376,"label":377,"count":378},"financial services","Financial Services",5,{"key":380,"label":381,"count":168},"insurance","Insurance",{"key":383,"label":384,"count":121},"banking","Banking",{"key":386,"label":387,"count":121},"employee benefits brokerage","Employee Benefits Brokerage",[389],{"key":30,"label":390,"count":9},"PERMANENT",[392,394,396,398,401,403,405,407,409,412,414,416,418,420,423,425,427,429,431,433,435,437,439,441],{"key":393,"label":146,"slug":393,"count":32},"risk-management",{"key":395,"label":149,"slug":395,"count":32},"regulatory-compliance",{"key":397,"label":120,"slug":397,"count":168},"governance",{"key":399,"label":400,"slug":399,"count":168},"it-audit","It Audit",{"key":402,"label":190,"slug":402,"count":168},"network-security",{"key":404,"label":152,"slug":404,"count":168},"control-testing",{"key":406,"label":235,"slug":406,"count":168},"management-reporting",{"key":408,"label":367,"slug":408,"count":121},"technology-risk",{"key":410,"label":411,"slug":410,"count":121},"risk-based-assurance","Risk-Based Assurance",{"key":413,"label":287,"slug":413,"count":121},"endpoint-protection",{"key":415,"label":286,"slug":415,"count":121},"attack-surface-management",{"key":417,"label":106,"slug":417,"count":121},"tech-lead",{"key":419,"label":138,"slug":419,"count":121},"cloud-security",{"key":421,"label":422,"slug":421,"count":121},"sre-practices","Sre Practices",{"key":424,"label":329,"slug":424,"count":121},"detection-engineering",{"key":426,"label":339,"slug":426,"count":121},"escalation-framework-design",{"key":428,"label":334,"slug":428,"count":121},"team-management",{"key":430,"label":108,"slug":430,"count":121},"architecture",{"key":432,"label":338,"slug":432,"count":121},"playbook-development",{"key":434,"label":336,"slug":434,"count":121},"security-policy-compliance",{"key":436,"label":258,"slug":436,"count":121},"cyber-risk-quantification",{"key":438,"label":187,"slug":438,"count":121},"after-action-review",{"key":440,"label":256,"slug":440,"count":121},"compliance",{"key":442,"label":443,"slug":442,"count":121},"rag-systems","Rag Systems",[445,447,448,450,452,454,457,460,462,465,467,469,471,472,475,477,479,482,485,487,489,491,493,495],{"key":446,"label":49,"slug":446,"count":9},"incident-response",{"key":419,"label":138,"slug":419,"count":378},{"key":449,"label":141,"slug":449,"count":33},"configuration-management",{"key":451,"label":140,"slug":451,"count":168},"data-security",{"key":453,"label":35,"slug":453,"count":168},"python",{"key":455,"label":456,"slug":455,"count":168},"identity-and-access-management","Identity And Access Management",{"key":458,"label":459,"slug":458,"count":168},"aws","Aws",{"key":461,"label":219,"slug":461,"count":168},"vulnerability-management",{"key":463,"label":464,"slug":463,"count":168},"ms-azure","MS Azure",{"key":466,"label":170,"slug":466,"count":168},"cybersecurity",{"key":468,"label":175,"slug":468,"count":168},"security-monitoring",{"key":470,"label":142,"slug":470,"count":168},"log-generation",{"key":402,"label":190,"slug":402,"count":168},{"key":473,"label":474,"slug":473,"count":121},"waf","Waf",{"key":476,"label":69,"slug":476,"count":121},"grafana",{"key":478,"label":283,"slug":478,"count":121},"asset-inventory",{"key":480,"label":481,"slug":480,"count":121},"backup-and-recovery","Backup And Recovery",{"key":483,"label":484,"slug":483,"count":121},"mitre-attck","Mitre Att&Ck",{"key":486,"label":45,"slug":486,"count":121},"scalability",{"key":488,"label":361,"slug":488,"count":121},"release-management",{"key":490,"label":44,"slug":490,"count":121},"fault-tolerance",{"key":492,"label":96,"slug":492,"count":121},"prompt-injection",{"key":494,"label":84,"slug":494,"count":121},"durable-execution",{"key":496,"label":46,"slug":496,"count":121},"observability",[498],{"key":26,"label":26,"count":9},[500],{"key":29,"label":29,"count":9},{"total":502,"jobs":503},0,[]]