ZipRecruiter

Log In

1

Incident Analyst Jobs (NOW HIRING)

Volto USA

Incident Management Specialist

San Jose, CA · On-site

Act as Level 1 (L1) supporting users by timely accepting, acknowledging, and analyzing incidents (support tickets). * Maintain active status on the incident management platform and communication ...

Schoolsfirstfcu

Incident Responder I

Tustin, CA · On-site

Incident Responder I The pay range for this position is listed below. Our pay ranges are built to ... Uses prebuilt dashboards and analytics to identify potential issues (service degradation, security ...

Schoolsfirstfcu

Incident Responder I

Sacramento, CA · On-site

Incident Responder I The pay range for this position is listed below. Our pay ranges are built to ... Uses prebuilt dashboards and analytics to identify potential issues (service degradation, security ...

previous page

Showing results 41-60

All JobsGovernment JobsEmergency Services JobsIncident Response Analyst JobsIncident Analyst Jobs

Incident Analyst information

See salary details

$19

$38

$62

How much do incident analyst jobs pay per hour?

As of Aug 20, 2026, the average hourly pay for incident analyst in the United States is $38.31, according to ZipRecruiter salary data. Most workers in this role earn between $28.85 and $43.51 per hour, depending on experience, location, and employer.

What is an incident analyst?

Incident Analysts are professionals responsible for identifying, investigating, and managing incidents that disrupt normal operations within an organization, particularly related to IT systems and cybersecurity. They monitor systems for unusual activity, assess the severity of incidents, and coordinate responses to mitigate risks and restore services. Incident Analysts also document incidents, analyze root causes, and recommend improvements to prevent future occurrences. Their work is essential for maintaining the security and reliability of an organization's technology infrastructure.

What does an incident analyst do?

An incident analyst works to investigate cybersecurity or computer network-related incidents. Your job duties in this career include working to diagnose issues related to each event. You usually document your efforts and report on your findings. Your employers then expect you to develop and implement strategies to handle (or avoid) similar incidents in the future. Your responsibilities could include working to monitor current networks/systems and examining security practices and procedures to find areas for operational improvement.

What are the key skills and qualifications needed to thrive as an incident analyst, and why are they important?

To thrive as an Incident Analyst, you need a solid understanding of IT systems, incident management processes, and analytical problem-solving, often supported by a degree in computer science or certifications like ITIL or CompTIA Security+. Familiarity with incident tracking systems, SIEM tools, and ticketing platforms is typically required. Strong communication, attention to detail, and the ability to remain calm under pressure are standout soft skills for this role. These skills ensure swift and effective response to incidents, minimizing business impact and maintaining organizational security.

How does an incident analyst typically interact with other IT teams during a major incident?

During a major incident, an Incident Analyst acts as a central point of coordination between various IT teams such as network operations, application support, and security. They facilitate communication, gather updates, and ensure that all teams have the information needed to resolve the issue efficiently. This role often involves organizing conference calls, documenting actions taken, and escalating problems when necessary. Effective collaboration and clear communication are critical skills, as the Incident Analyst helps drive the incident toward resolution while minimizing business impact.

What is the difference between Incident Analyst vs Security Analyst?

AspectIncident AnalystSecurity Analyst
Required CredentialsCertifications like CompTIA Security+, incident response trainingCertifications like CISSP, Security+, CEH
Work EnvironmentIT teams, incident response centers, corporate environmentsSecurity operations centers, IT security teams, corporate and government sectors
Employer & Industry UsageUsed across industries for incident management and responsePrimarily in cybersecurity, finance, government, and tech sectors
Common Search & ComparisonOften compared for incident handling rolesCompared for cybersecurity and threat management roles

While both Incident Analysts and Security Analysts work within IT and security environments, Incident Analysts focus on managing and responding to specific incidents, such as system outages or data breaches. Security Analysts have a broader role in protecting organizational assets from cyber threats, often requiring advanced security certifications. Understanding these differences helps organizations assign the right roles for effective incident response and security management.

Is incident response entry level?

Incident Analyst roles can be entry-level or require experience depending on the organization. Entry-level positions typically focus on monitoring security alerts and supporting incident investigations, often requiring basic knowledge of cybersecurity tools and concepts. More advanced roles may require certifications like CompTIA Security+ or CISSP and prior experience in security operations.

What do you need to be an incident analyst?

To become an incident analyst, candidates typically need a bachelor's degree in cybersecurity, information technology, or a related field. Strong analytical skills, knowledge of security tools and incident response procedures, and experience with data analysis or security monitoring are important. Certifications like CISSP or GIAC can also enhance qualifications.
More about Incident Analyst jobs

What cities are hiring for Incident Analyst jobs?

Cities with the most Incident Analyst job openings:

Who are the top companies hiring for Incident Analyst jobs?

The top employers for Incident Analyst jobs are:

What states have the most Incident Analyst jobs?

States with the most job openings for Incident Analyst jobs include:

What job categories do people searching Incident Analyst jobs look for?

The top searched job categories for Incident Analyst jobs are:

What are popular job titles related to Incident Analyst jobs?

For Incident Analyst jobs, the most frequently searched job titles are:

Incident Analyst jobs near you
Infographic showing various Incident Analyst job openings in the United States as of August 2026, with employment types broken down into 89% Full Time, 5% Part Time, and 6% Contract. Highlights an 80% Physical, 9% Hybrid, and 11% Remote job distribution, with an average salary of $79,692 per year, or $38.3 per hour.

Incident Handler

Bering-Alaka`ina Holdings, LLC

Honolulu, HI • On-site

Full-time

Medical, Dental, Life, Retirement, PTO

This job post has expired 1 day ago. Applications are no longer accepted.

Job description

Bering-Alaka`ina Holdings, LLC is looking for an Incident Handler to provide support for our government customer in Honolulu, Hawai'i.

We are seeking a highly skilled Incident Handler to join our team, dedicated to protecting our organization's critical assets and infrastructure. To thrive in this position, you must be able to excel in a fast-paced, dynamic environment, leveraging your skills to identify, analyze, and mitigate cyber threats. You will have opportunities to utilize and develop state-of-the-art security tools and technologies to enhance our incident response capabilities. We offer professional development opportunities to support your growth and align with current and future mission requirements, ensuring you stay at the forefront of the cybersecurity field.

DESCRIPTION OF RESPONSIBILITIES:

  • Monitor all sensors and agents managed by the organization for security event analysis and response and maintain and update the triage database with current threat data and response methods in real-time with follow-up.
  • Develop, staff, coordinate, and execute cyber-incident response investigations for the operational environment (unclassified and classified), addressing each pre-determined category of cyber incident detected and addressing priorities, types of internal defensive measures, and potential mitigation strategies to be employed at an acceptable level of risk.
  • Conduct incident analysis and recommend mitigation measures in response to advanced persistent threats (APT), attempted exploits/attacks, and malware delivery, which may include blocking hostile websites or restricting access to specific ports/protocols and/or applications.
  • Develop, test, and implement custom detection signatures and rules based on emerging threats, vulnerabilities, and attack vectors, and actively collaborate with penetration testing teams to validate the effectiveness and accuracy of these signatures through simulated attacks and real-world scenarios, ensuring a robust and resilient defense against evolving cyber threats.
  • Provide support and expertise to law enforcement and counterintelligence (LE/CI) officials, including the provision of required data along with a summary or analysis pertaining specifically to requirements in the LE/CI official request or within Organizational TTPs.
  • Provide justification of internal defensive measures and/or operational impact to a configuration control board (CCB) and/or approving authority (AO) for mitigation action approval and make recommendations to the supported operations and maintenance organization to take necessary actions.
  • Other duties as assigned, by Supervisor.

REQUIRED DEGREE/EDUCATION/CERTIFICATION:

  • A Bachelor of Science degree in Computer Science, Cybersecurity, Information Technology, or a related field (or equivalent work experience).
  • Must meet at least one of the following baseline certifications in lieu of education:
    • Cloud+
    • CBROPS
    • GCED
    • CFR
    • GFACT
    • CYSA
    • GISF
    • FITSP-O
    • GSEC
    • GCFA
    • PenTest+
    • GCIA
    • Security+
    • GDSA
  • Must meet designated Computing Environment (CE) certifications within 6 months of hire.
  • Proficiency in using security tools and technologies, such as SIEM, IDS/IPS, firewalls, and endpoint detection and response (EDR) solutions.
  • Experience with network and system administration, as well as understanding of common network protocols and services.
  • Familiarity with various operating systems, including Windows and Linux.
  • Excellent analytical and problem-solving skills, with the ability to think critically and make quick decisions under pressure.
  • Strong communication and collaboration skills, with the ability to effectively convey technical information to both technical and non-technical audiences.
  • Ability to work independently and as part of a team, demonstrating initiative and adaptability in a fast-paced environment.

REQUIRED SKILLS AND EXPERIENCE:

  • Automate various tasks via scripting languages: (PowerShell/Bash/Python, etc.)
  • Develop atomic, statistical, and behavioral rules within SIEM(s): (Splunk/Elastic/Trellix, etc.)
  • Analysis of network alerting within IDS/IPS(s): (Cisco Secure Firewall/Trellix/Security Onion, Snort/Suricata, etc.)
  • NIDS rule creation and tuning: (Snort/Suricata, etc.)
  • PCAP Analysis and associated tools: (TCPDump/Snort/Suricata, Wireshark/Network miner, etc.)
  • Understand logging outputs of Network Security Monitors: (Zeek/Suricata, etc.)
  • Digital Forensic solutions for Hard Drive Imaging analysis: (EnCase, FTK Imager, etc.)
  • Memory Analysis tools for analysis of SWAP & RAM: (Volatility, etc.)
  • Host analysis HID/HIP and other Host solutions: (Trellix HBSS/ePO, Tychon/Tanium, etc.)

REQUIRED CITIZENSHIP AND CLEARANCE: 

  • Must be a U.S. Citizen.
  • Must have a TOP SECRET/SCI clearance OR a SECRET clearance with the ability to upgrade.

COMPENSATION DETAILS: 

$XXX,XXX.00-$XXX,XXX.00  (VP Approved Range)

The compensation range or hourly rate provided is a good faith estimate at the time of posting. Final compensation will be determined based on qualifications, experience, skills, internal equity, market conditions, and applicable laws.

Bering-Alaka`ina Holdings, LLC is a fast-growing government service provider. Employees enjoy competitive salaries. Eligible employees enjoy a 401K plan with company match; medical, dental, disability, and life insurance coverage; tuition reimbursement; paid time off; and 11 paid holidays.

We are an Equal Opportunity/Affirmative Action Employer of individuals with disabilities and veterans. We not illegally discriminate in employment decisions on the basis of any protected categories. If you are a person with a disability and you need an accommodation during the application process, please click here to request accommodation. We E-Verify all employees.

As a part of BSNC, Bering- Alakaina Holdings gives hiring, promotion, training, and retention preference to BSNC shareholders, descendants and shareholder spouses who meet the minimum qualifications for the job. Qualified job candidates will generally be considered in the following order: BSNC shareholders, descendants, shareholder spouses, current employees, and outside candidates. The BSNC Shareholder Development department tracks and monitors the implementation of the Shareholder Hire Preference across its operations.

Bering-Alaka`ina Holdings, LLC is comprised of industry-recognized government service firms designated as Alaska Native Corporation (ACN)-owned and 8(a) certified businesses and includes Ke`aki Technologies, LLC; Laulima Government Solutions, LLC; Kupono Government Services, LLC; Kapili Services, LLC;  Po`okela Solutions, LLC;  Kikaha Solutions, LLC; and Pololei Solutions, LLC.

For additional information, please visit www.beringalakaina.com

#LI-JS1

#ClearanceJobs

Employment Type: Regular Full Time

Apply