ZipRecruiter

Log In

1

Incident Handler Jobs (NOW HIRING)

Agile Defense

Incident Response Team Lead

Reston, VA

GIAC Certified Intrusion Analyst (GCIA), GIAC Certified Incident Handler (GCIH); GIAC Certified Forensic Analyst (GCFA); SANS GIAC Certified Enterprise Defender (GCED) or Other Information Assurance ...

Avaya

SOC Analyst & Incident Response Lead

OR · Hybrid

GIAC Certified Forensic Analyst (GCFA) or GIAC Certified Incident Handler (GCIH) * CISSP, OSCP, GCIA, or equivalent * Microsoft certifications: SC-200, SC-300, AZ-500 Key Competencies * Calm and ...

ManTech

Senior Cyber Incident Response Analyst

Mclean, VA · On-site

$101K - $130K/yr

Relevant industry certifications such as GIAC Certified Incident Handler (GCIH) or Certified Incident Response Handler (GCFA). * Advanced experience using SIEM systems, network security tools, and ...

Avaya

SOC Analyst & Incident Response Lead

OR · On-site +1

GIAC Certified Forensic Analyst (GCFA) or GIAC Certified Incident Handler (GCIH) * CISSP, OSCP, GCIA, or equivalent * Microsoft certifications: SC-200, SC-300, AZ-500 Key Competencies * Calm and ...

next page

Showing results 1-20

All JobsIncident Handler Jobs

Incident Handler information

See salary details

$12

$19

$26

How much do incident handler jobs pay per hour?

As of Jun 24, 2026, the average hourly pay for incident handler in the United States is $19.25, according to ZipRecruiter salary data. Most workers in this role earn between $17.07 and $20.67 per hour, depending on experience, location, and employer.

What do incident handlers do?

Incident handlers are cybersecurity professionals responsible for identifying, analyzing, and responding to security incidents and breaches. They coordinate efforts to contain threats, investigate causes, and implement measures to prevent future incidents, often using tools like intrusion detection systems and forensic software. Their work helps organizations maintain security and compliance.

Is 40 too old for cyber security?

Incident handlers and cybersecurity professionals can successfully start or advance their careers at age 40 or older. Success in cybersecurity depends on skills, certifications, and experience rather than age, and many employers value diverse backgrounds and mature problem-solving abilities.

What are incident handlers?

Incident handlers are cybersecurity professionals responsible for managing and responding to security incidents within an organization. Their main duties include identifying, investigating, and mitigating cyber threats or breaches to minimize damage and recover normal operations. They also develop and implement incident response plans, analyze security alerts, and coordinate with other teams to ensure effective communication during incidents. Incident handlers play a crucial role in maintaining an organization’s security posture and ensuring regulatory compliance.

What are the most common challenges Incident Handlers face when responding to security incidents, and how can these be addressed in a team environment?

Incident Handlers often encounter challenges such as rapidly evolving threats, incomplete information, and coordinating with multiple departments under time pressure. Effective communication and a well-defined incident response plan are crucial for overcoming these obstacles. In a team environment, regularly practicing incident simulations and debriefing after real events help ensure everyone understands their roles and can collaborate efficiently, ultimately reducing response times and improving outcomes.

What are the key skills and qualifications needed to thrive as an Incident Handler, and why are they important?

To thrive as an Incident Handler, you need a solid understanding of cybersecurity principles, risk assessment, and network protocols, often supported by a degree in computer science or related certifications like CEH or CISSP. Familiarity with security information and event management (SIEM) tools, intrusion detection systems (IDS), and forensic analysis software is essential. Strong analytical thinking, attention to detail, and effective communication are crucial soft skills for coordinating responses and documenting incidents. These skills and qualities are vital to quickly mitigate threats, minimize damage, and maintain organizational security.

What is the difference between Incident Handler vs Security Analyst?

AspectIncident HandlerSecurity Analyst
CertificationsCompTIA Security+, GIAC GCIHCompTIA Security+, CISSP, GIAC GSEC
Work EnvironmentResponds to security incidents, investigates breachesMonitors security systems, analyzes threats
Employer & Industry UsageCybersecurity teams in various industries, incident response firmsIT departments, security operations centers (SOCs)

Incident Handlers focus on responding to and managing security incidents, while Security Analysts primarily monitor, analyze, and prevent threats. Both roles require similar certifications and often work within the same environments, but Incident Handlers are more reactive, dealing with incidents as they occur, whereas Security Analysts are proactive in threat detection and prevention.

What jobs pay $2000 a day?

Incident handlers typically do not earn $2000 a day; such high daily rates are more common in specialized consulting, executive cybersecurity roles, or freelance cybersecurity experts with extensive experience and certifications. These positions often require advanced skills, certifications like CISSP or CISM, and may involve contract work or consulting arrangements. Most incident response roles offer salaries or hourly rates significantly below this level unless in senior or consulting capacities.

What jobs make $10,000 a month without a degree?

Incident handlers typically do not earn $10,000 a month without specialized experience or certifications; high-paying cybersecurity roles often require relevant skills, certifications like CISSP or CEH, and hands-on expertise. Other high-income jobs without a degree include sales, real estate, and certain entrepreneurial ventures, but these often depend on performance and market conditions.
More about Incident Handler jobs
What states have the most Incident Handler jobs? States with the most job openings for Incident Handler jobs include:
What job categories do people searching Incident Handler jobs look for? The top searched job categories for Incident Handler jobs are:
Incident Handler jobs near you

Lead Incident Responder with Security Clearance

Evolver Federal

Washington, DC • On-site

Other

Medical, Dental, Vision, Retirement, PTO

Posted 24 days ago

Job description

Evolver Federal is seeking a Lead Incident Responder to fulfill a requirement for a potential government client. The Lead Incident Responder serves as the central point of accountability for day-to-day incident response operations, providing leadership and direction in high-pressure environments. This role emphasizes measurable outcomes such as MTTR reduction and compliance audit success while ensuring rapid detection, containment, eradication, and recovery from security incidents.

The Lead Incident Responder will maintain compliance with federal cybersecurity frameworks (NIST 800-series, RMF, TIC 3.0), lead investigations into complex threats, and deliver compliance reporting to federal stakeholders. Responsibilities include coordinating with SOC teams, ISSOs, and AOs, integrating threat intelligence and forensic analysis into response processes, and driving continuous improvement to strengthen organizational resilience against evolving cyber threats. This position requires deep technical expertise, strong leadership skills, and the ability to align incident response operations with performance-based federal requirements.

Responsibilities: * Lead end-to-end incident response activities, including detection, triage, containment, eradication, and recovery. * Direct investigations of advanced threats, including APTs, ransomware, and insider threats. * Lead tabletop exercises and incident simulations for federal agencies.

* Coordinate with SOC analysts, engineering teams, and federal stakeholders during major incidents. * Develop and maintain incident response playbooks, escalation procedures, and forensic methodologies. * Ensure alignment with Zero Trust Architecture principles.

* Perform root cause analysis and recommend corrective actions to prevent recurrence. * Integrate threat intelligence into incident response workflows to enhance detection and mitigation. * Oversee digital forensics and evidence handling for legal and compliance requirements.

* Prepare and deliver executive-level incident reports and post-incident reviews. * Support continuous improvement initiatives, including automation of incident response processes. * Ensure compliance with federal cybersecurity frameworks (NIST 800-series, RMF, FISMA) and organizational policies.

Basic Qualifications: * Bachelor's Degree in Computer Science, Information Management (IM), Information Technology, Engineering, or equivalent with 6 years of technical experience and 4 years' experience in IT Solutions at senior management * Certified Information Systems Security Professional (CISSP) * Certified Incident Handler, Certified Intrusion Analyst, Certified Ethical Hacker, or similar certifications * Project Management Institute (PMI) Project Management Professional (PMP) (Highly Recommended) * Information Technology Infrastructure Library (ITIL) 4 Foundation * 10 years of successful enterprise experience in an IT or technology-related field, with the last 5 years, on large government technical BPAs/contracts * US Citizen with the ability to pass a comprehensive government background check Preferred Qualifications: * Experience managing or supporting cybersecurity operations, including SOC functions, in a federal or highly regulated environment * Experience leading cybersecurity programs within federal civilian agencies * Master's degree in a technical or management-related field * CISM or GIAC certifications (e.g., GCFA, GCIH) * Experience with FedRAMP and CISA directives for federal compliance * Experience with performance-based contracts and cross-functional team leadership * Strong communication skills, including experience delivering executive briefings and incident communications * Hands-on experience with SIEM (Splunk, Elastic), SOAR (Cortex XSOAR), and EDR platforms (CrowdStrike, Microsoft Defender). * Expertise in malware analysis, reverse engineering, and memory forensics. * Familiarity with cloud incident response and hybrid environments (AWS, Azure).

* Experience leading large-scale incident response efforts in federal or critical infrastructure environments. * Experience with federal procurement processes and contract deliverables * Hands-on experience with Fed IT programs' SELC/SDLC * Knowledge of threat hunting methodologies and proactive detection strategies. * Ability to mentor junior responders and build a high-performing incident response team.

* Understanding of advanced attack techniques, including lateral movement and privilege escalation. * Experience with automation tools for incident response and threat containment. Evolver Federal is an equal opportunity employer and welcomes all job seekers.

It is the policy of Evolver Federal not to discriminate based on race, color, ancestry, religion, gender, age, national origin, gender identity or expression, sexual orientation, genetic factors, pregnancy, physical or mental disability, military/veteran status, or any other factor protected by law. Actual salary will depend on factors such as skills, qualifications, experience, market and work location. Evolver Federal offers competitive benefits, including health, dental and vision insurance, 401(k), flexible spending account, and paid leave (including PTO and parental leave) in accordance with our applicable plans and policies.

Apply