ZipRecruiter

Log In

1

Incident Commander Jobs (NOW HIRING)

Jobtailor

GRC & Incident Manager

Los Angeles, CA · On-site

$110 - $170/hr

Serve as Incident Commander for security and operational incidents, holding full command and control over response activities. * Build, execute, and maintain Incident Action Plans (IAPs) that give ...

New

Yuno

Incident command - act as incident commander on major and critical incidents, owning coordination, decision-making cadence, and escalation from detection through resolution; treat merchant ...

Lambda

$125K - $195K/yr

This individual acts as the central command point during major incidents, ensuring rapid triage, cross-team coordination, effective communication, and structured post-incident analysis. This role ...

previous pagenext page

Showing results 21-40

All JobsGovernment JobsEmergency Services JobsIncident Response Manager JobsIncident Commander Jobs

Incident Commander information

See salary details

$31K

$53.5K

$61K

How much do incident commander jobs pay per year?

As of Aug 20, 2026, the average yearly pay for incident commander in the United States is $53,456.00, according to ZipRecruiter salary data. Most workers in this role earn between $59,000.00 and $59,500.00 per year, depending on experience, location, and employer.

What does an incident commander do?

Incident commander (IC) jobs are positions of responsibility and authority to carry out emergency response plans. Incident commanders play a vital role in emergency response for natural disasters, acts of violence, and other emergencies, such as fires and bomb threats. More recently, the information technology (IT) sector adopted the IC role to manage disaster recovery and business continuity in the event of a computer systems failure or data breach. Whether in IT or other emergency response situations, as IC your duties include allocating resources, minimizing fallout, and supervising operations.

What are the key skills and qualifications needed to thrive as an incident commander, and why are they important?

An Incident Commander is the individual responsible for managing and directing response efforts during an emergency or critical incident, such as a natural disaster, cybersecurity breach, or other crisis. They oversee the incident response team, make key decisions, and coordinate communications between agencies or departments to ensure a swift and effective resolution. The Incident Commander is typically designated at the start of an incident and remains in charge until the situation is resolved or command is transferred. Their leadership is crucial for maintaining order, safety, and clear lines of authority during high-stress situations.

How does an incident commander typically interact with other teams during a major incident?

During a major incident, the Incident Commander serves as the central point of communication, coordinating efforts between technical teams, management, and stakeholders. They facilitate regular updates, assign clear responsibilities, and ensure that everyone is aligned on priorities and next steps. This role often requires quick decision-making, clear documentation, and the ability to manage high-pressure situations while fostering collaboration across departments to resolve issues efficiently.

What is the difference between Incident Commander vs Emergency Response Coordinator?

AspectIncident CommanderEmergency Response Coordinator
CertificationsICS certifications, First Aid/CPREmergency management certifications, First Aid/CPR
Work EnvironmentEmergency scenes, incident sitesEmergency planning offices, coordination centers
Employer & IndustryPublic safety, fire departments, disaster responseGovernment agencies, NGOs, corporate safety teams
Primary RoleLead incident response, make tactical decisionsCoordinate response efforts, plan emergency procedures

While both roles focus on emergency situations, the Incident Commander is responsible for leading on-site incident response and making tactical decisions. The Emergency Response Coordinator typically oversees planning and coordination efforts, ensuring effective response strategies are in place. Both roles require similar certifications and are vital in emergency management, but their day-to-day responsibilities and work environments differ.

More about Incident Commander jobs

What cities are hiring for Incident Commander jobs?

Cities with the most Incident Commander job openings:

What are the most commonly searched types of Incident Commander jobs?

The most popular types of Incident Commander jobs are:

Who are the top companies hiring for Incident Commander jobs?

The top employers for Incident Commander jobs are:

What states have the most Incident Commander jobs?

States with the most job openings for Incident Commander jobs include:

What job categories do people searching Incident Commander jobs look for?

The top searched job categories for Incident Commander jobs are:

What are popular job titles related to Incident Commander jobs?

For Incident Commander jobs, the most frequently searched job titles are:

Incident Commander jobs near you
Infographic showing various Incident Commander job openings in the United States as of August 2026, with employment types broken down into 89% Full Time, and 11% Part Time. Highlights an 90% In-person, 5% Hybrid, and 5% Remote job distribution, with an average salary of $53,456 per year, or $25.7 per hour.

Incident Commander & Incident Response Lead

Defianx

Tysons, VA • On-site

Full-time

Re-posted 16 days ago

Job description


The Incident Commander serves as the senior operational leader during cybersecurity incidents and is responsible for directing, coordinating, and managing all response activities throughout the incident lifecycle. This position acts as the central decision-maker during major cyber events, ensuring that technical teams, business stakeholders, executive leadership, and external partners operate in a coordinated and effective manner.
The Incident Commander leads incident response efforts involving ransomware, data breaches, cloud compromises, insider threats, business email compromise, advanced persistent threats, and other high-impact security incidents. The role is responsible for establishing response priorities, coordinating technical investigations, managing escalation activities, directing containment and recovery actions, and ensuring timely communication with executive leadership and stakeholders.
The Incident Commander serves as the bridge between technical teams and organizational leadership by translating complex technical findings into actionable business information. The position oversees incident status reporting, executive briefings, operational decision-making, forensic coordination, threat intelligence integration, and post-incident reviews. The Incident Commander is ultimately accountable for ensuring incidents are managed efficiently, risks are minimized, and business operations are restored as quickly and safely as possible.
Requirements
The candidate must have a minimum of Secrete Clearance.
Candidates must possess extensive experience leading cybersecurity incident response operations within enterprise, government, defense, critical infrastructure, or managed security service environments. The successful candidate should demonstrate strong expertise in incident response, crisis management, cyber defense operations, threat intelligence, digital forensics coordination, and executive communications.
The candidate must have experience managing complex security incidents involving multiple teams, technologies, stakeholders, and business units. Strong knowledge of incident handling methodologies, cyber attack lifecycle, ransomware response, breach management, cloud security incidents, and enterprise security operations is required. Experience coordinating technical teams during high-pressure situations while maintaining operational awareness and decision-making discipline is essential.
The position requires exceptional leadership, communication, and organizational skills. Candidates must be capable of delivering executive briefings, managing stakeholder expectations, facilitating crisis communications, and translating technical information into business-focused recommendations. Experience coordinating forensic investigations, threat intelligence activities, legal considerations, regulatory reporting, and recovery operations is highly desirable.
Preferred certifications include CISSP, GCIH, GCFA, CISM, CASP+, PMP, ITIL, or equivalent industry-recognized certifications. Equivalent experience leading major cybersecurity incidents, crisis response operations, or cyber defense missions may be considered in lieu of specific certifications.
Core Skills
  • Incident Response Leadership
  • Crisis Management
  • Executive Briefings and Communications
  • Threat Intelligence Integration
  • Digital Forensics Coordination
  • Major Incident Management
  • Cybersecurity Operations
  • Risk Assessment and Decision Making
  • Stakeholder Management
  • Recovery and Business Continuity Coordination
  • Regulatory and Reporting Awareness
  • Cross-Functional Team Leadership

Apply