ZipRecruiter

Log In

1

Incident Handler Jobs (NOW HIRING)

Evolver Federal

Lead Incident Responder

Washington, DC · On-site

$160K - $185K/yr

Certified Incident Handler, Certified Intrusion Analyst, Certified Ethical Hacker, or similar certifications * Project Management Institute (PMI) Project Management Professional (PMP) (Highly ...

Evolver

Lead Incident Responder

Washington, DC · On-site

Certified Incident Handler, Certified Intrusion Analyst, Certified Ethical Hacker, or similar certifications * Project Management Institute (PMI) Project Management Professional (PMP) (Highly ...

Evolver Federal

Lead Incident Responder

Washington, DC · On-site

$160K - $185K/yr

... Incident Handler, Certified Intrusion Analyst, Certified Ethical Hacker, or similar certificationsProject Management Institute (PMI) Project Management Professional (PMP) (Highly Recommended ...

AGR LLC

Mid-Level Cyber Defense Analyst

Suitland, MD · On-site

Must have, or be able to obtain within 3 months, one of the following certifications: CERT Certified Computer Security Incident Handler (CSIH), ECC Certified Ethical Hacker (CEH), GIAC Certified ...

previous pagenext page

Showing results 21-40

All JobsIncident Handler Jobs

Incident Handler information

See salary details

$12

$19

$26

How much do incident handler jobs pay per hour?

As of Aug 10, 2026, the average hourly pay for incident handler in the United States is $19.25, according to ZipRecruiter salary data. Most workers in this role earn between $17.07 and $20.67 per hour, depending on experience, location, and employer.

What is an incident handler?

Incident handlers are cybersecurity professionals responsible for managing and responding to security incidents within an organization. Their main duties include identifying, investigating, and mitigating cyber threats or breaches to minimize damage and recover normal operations. They also develop and implement incident response plans, analyze security alerts, and coordinate with other teams to ensure effective communication during incidents. Incident handlers play a crucial role in maintaining an organization’s security posture and ensuring regulatory compliance.

What are the most common challenges incident handlers face when responding to security incidents, and how can these be addressed in a team environment?

Incident Handlers often encounter challenges such as rapidly evolving threats, incomplete information, and coordinating with multiple departments under time pressure. Effective communication and a well-defined incident response plan are crucial for overcoming these obstacles. In a team environment, regularly practicing incident simulations and debriefing after real events help ensure everyone understands their roles and can collaborate efficiently, ultimately reducing response times and improving outcomes.

What are the key skills and qualifications needed to thrive as an incident handler, and why are they important?

To thrive as an Incident Handler, you need a solid understanding of cybersecurity principles, risk assessment, and network protocols, often supported by a degree in computer science or related certifications like CEH or CISSP. Familiarity with security information and event management (SIEM) tools, intrusion detection systems (IDS), and forensic analysis software is essential. Strong analytical thinking, attention to detail, and effective communication are crucial soft skills for coordinating responses and documenting incidents. These skills and qualities are vital to quickly mitigate threats, minimize damage, and maintain organizational security.

What is the difference between Incident Handler vs Security Analyst?

AspectIncident HandlerSecurity Analyst
CertificationsCompTIA Security+, GIAC GCIHCompTIA Security+, CISSP, GIAC GSEC
Work EnvironmentResponds to security incidents, investigates breachesMonitors security systems, analyzes threats
Employer & Industry UsageCybersecurity teams in various industries, incident response firmsIT departments, security operations centers (SOCs)

Incident Handlers focus on responding to and managing security incidents, while Security Analysts primarily monitor, analyze, and prevent threats. Both roles require similar certifications and often work within the same environments, but Incident Handlers are more reactive, dealing with incidents as they occur, whereas Security Analysts are proactive in threat detection and prevention.

More about Incident Handler jobs
Who are the top companies hiring for Incident Handler jobs? The top employers for Incident Handler jobs are:
What states have the most Incident Handler jobs? States with the most job openings for Incident Handler jobs include:
What job categories do people searching Incident Handler jobs look for? The top searched job categories for Incident Handler jobs are:
Incident Handler jobs near you
Infographic showing various Incident Handler job openings in the United States as of August 2026, with employment types broken down into 82% Full Time, and 18% Contract. Highlights an 100% In-person job distribution, with an average salary of $40,046 per year, or $19.3 per hour.

Cyber Incident Response Lead

West Advanced Technologies (WATI)

Downey, CA • On-site

Full-time

Re-posted 8 days ago

Job description

Cyber Incident Response Lead
Downey, CA
12+ months
Required Skills/Exp:
Experience with documenting incident response process and procedures.
Experience with first responder forensics analysis and investigation
Experience with triage and resolving advanced vector attacks such as botnets and advanced persistent threats (APTs)
Experience as the leas during business impacting situations, and work to restore normal service operations in cooperation with cross-functional partners.;
Advanced skills in timely communications and updates are provided for incident management and root-cause scenarios.
Ability to work directly with data asset owners and business response plan owners during high severity events of interest.; Leads the effort on messaging and communication related to incident reporting for all audience.
Experience driving containment strategy during data loss or breach events.
Experience with the documentation and maintain chain of custody of incident evidence.
Experience driving post-containment recovery effort through to complete incident closure
Should work with teams to provide recommendations to resolve and/or reduce impact of incident and to prevent future similar incidents.
Develop and enrich restoration procedures to mitigate future outages and business disruptions. a. Experience providing written final incident report to executive management that provide; Assessing scope of incident damage and assisting in the determination of incident severity.; Document activities such as investigation, discovery and recovery during the incident.
Experience with collaborating with departmental IT team to identify the root cause of recurring incidents and create action-plans for remediate and prevent recurring situations.
Maintain on-call availability for 24x7x365 coverage
Experience Preferred
One or more of the following professional certifications requited: Qualified Security Assessor (QSA), Certified Information Systems Auditor (CISA), Certified Information Systems Security Professionals (CISSP), Certified Information Security Manager (CISM), Certified Information Privacy Professional (CIPP), GIAC Certified Incident Handler, (GCIH) or GIAC Network Forensic Analyst.
Bachelor's degree from an accredited college in Technology related discipline (e.g., Computer Science, Engineering, Information Systems, etc.) or equivalent experience/combined education.
Desired of three (3) years' experience in the last five (5) years as an IT Security Incident Response Manager, supporting a complex enterprise security environment for a large public or private organization. Desired of three (3) years of experience in the past five (5) years as an IT Security Incident Response Manager, supporting Enterprise Multi-Tenant environment, include responding, containing, remediating, and reporting on the infrastructure connecting to large private or public organization and Public Cloud Providers, such as AWS, Azure and/or GCP.
Minimum of two (2) years' experience in the last three (3) years analyzing, responding, and remediating enterprise network & security architectures.
Minimum of two (2) years' experience in the last three (3) years leading IT Security/Information Security teams.
Minimum of two (2) years' experience in the last three (3) years delivering Incident Reports and Remediation Recommendations in a large enterprise organization.
Demonstrated ability to create clear, concise technical documentations such as procedures, Visio diagrams, and system support documents, and strong presentation skills with experience using Microsoft PowerPoint.
Regards
Naresh Damagalla
West Advanced Technologies, Inc
E: naresh.d@wati.com

Apply