ZipRecruiter

Log In

1

Incident Response Architect Jobs (NOW HIRING)

Sygnia

Incident Response Manager

Manhattan, NY · On-site +1

Solid technical knowledge of network architecture, internet protocols, endpoint systems, and common security controls. * Hands-on experience with incident response tools and techniques, such as SIEM ...

Base One Technologies

Strong understanding of network architecture/security * Experience performing cyber incident response * Ability to think independently * Demonstrates superior written and oral communication skills

Ancestry

Manager, Incident Response

... architecture enhancements, and process improvements. * Playbook & Automation Strategy: Drive the ... Incident Response Depth: 6+ years of hands-on experience in enterprise-scale incident response ...

Cognizant

Incident Response Senior Manager

Nashville, TN · On-site

$135K - $145K/yr

About the Role As a Incident Response Senior Manager, you will drive impactful contributions and ... architecture, policy, and data protection to ensure aligned and timely response activities. * Lead ...

New

CrowdStrike Holdings, Inc.

Network Operations and Architecture/Engineering: strong understanding of secure network architecture and strong background in performing network operations * Cloud Incident Response: knowledge in any ...

CrowdStrike Holdings, Inc.

Network Operations and Architecture/Engineering: strong understanding of secure network architecture and strong background in performing network operations * Cloud Incident Response: knowledge in any ...

next page

Showing results 1-20

All JobsIncident Response Architect Jobs

Incident Response Architect information

What is an incident response architect?

An Incident Response Architect is a cybersecurity professional who designs and implements frameworks, systems, and processes for detecting, responding to, and recovering from security incidents within an organization. They are responsible for developing incident response strategies, integrating security tools, and ensuring that teams are prepared to handle threats effectively. Their work is crucial in minimizing the impact of cyberattacks and ensuring business continuity. Typically, they collaborate closely with other IT and security teams to continuously improve the organization’s security posture.

What are the typical challenges an incident response architect faces when coordinating with cross-functional teams during a cyber incident?

Incident Response Architects often encounter challenges such as aligning priorities across IT, legal, and executive teams, ensuring clear communication under time-sensitive conditions, and integrating input from diverse stakeholders into a unified response plan. Balancing technical requirements with organizational risk management and compliance needs can also be complex. Strong collaboration, clear documentation, and well-practiced incident response procedures help mitigate these challenges and ensure effective incident resolution.

What are the key skills and qualifications needed to thrive as an incident response architect, and why are they important?

To thrive as an Incident Response Architect, you need deep expertise in cybersecurity, knowledge of incident response frameworks, risk assessment, and typically a degree in computer science or related field. Familiarity with SIEM platforms, forensic analysis tools, and industry certifications such as CISSP, GIAC, or CISM are highly beneficial. Strong analytical thinking, effective communication, and the ability to remain calm under pressure distinguish top performers in this role. These skills ensure rapid, coordinated, and effective responses to security incidents, protecting organizational assets and reputation.

What is the difference between Incident Response Architect vs Security Analyst?

AspectIncident Response ArchitectSecurity Analyst
CertificationsCISSP, GIAC certifications, SANS certificationsCISSP, Security+, CEH
Work EnvironmentDesigns incident response strategies, collaborates with teams, develops protocolsMonitors security alerts, investigates incidents, implements security measures
Employer & Industry UsageUsed in cybersecurity teams across industries for incident planningCommonly employed in security operations centers (SOCs) for threat detection

The Incident Response Architect focuses on designing and overseeing incident response strategies, while the Security Analyst handles day-to-day monitoring and incident investigation. Both roles require relevant certifications and work within cybersecurity teams, but their responsibilities differ in scope and focus.

What are popular job titles related to Incident Response Architect jobs?

For Incident Response Architect jobs, the most frequently searched job titles are:

Infographic showing various Incident Response Architect job openings in the United States as of June 2026, with employment types broken down into 68% Full Time, 27% Part Time, 1% Temporary, and 4% Contract. Highlights an 82% Physical, 5% Hybrid, and 13% Remote job distribution.

Incident Response

Los Angeles, CA • On-site

West Advanced Technologies (WATI)
Computer and Electronic Product Manufacturing • 1 - 10 employees
Learn more about West Advanced Technologies (WATI)external

Full-time

Re-posted 11 days ago

Job description

Incident Response
Downey, CA
12+ months
Skills Required
Managed at least two data centers, including architecting, designing, implementing, and managing security for highly available, resilient systems (physical, virtual, cloud). Analyzing information security systems and applications, including recommending and developing security controls for data integrity, to protect information against unauthorized modification and data loss prevention. Defining the requirements, principles, and models that guide technology decisions for the enterprise, and designing security systems with specifications of equipment, software, and infrastructure. Remediation of security vulnerabilities Be able to Perform security design/architecture reviews, code reviews, and penetration tests of large applications, systems, and/or networks. Assess Critical Infrastructure Protection (CIP) controls against existing network implementations (i.e., gap analysis).
1. Three (3) years as a Senior Information Technology Security Architect and two (2) years in a leadership role. 2. Three (3) years experience in the last five (5) years as an IT Security Incident Response Manager, supporting a complex enterprise security environment for large public or private organizations. 3. Three (3) years of experience in the past five (5) years as an IT Security Incident Response Manager, supporting Enterprise Multi-Tenant environment, including responding, containing, remediating, and reporting on the infrastructure connecting to a large private or public organization and Public Cloud Providers, such as AWS, Azure and/or GCP.
1. One or more of the following professional certifications Qualified Security Assessor (QSA), Certified Information Systems Auditor (CISA), Certified Information Systems Security Professionals (CISSP), Certified Information Security Manager (CISM), Certified Information Privacy Professional (CIPP), GIAC Certified Incident Handler, (GCIH) or GIAC Network Forensic Analyst, CCIE. 2. Bachelor's degree from an accredited college in Technology related discipline (e.g. Computer Science, Engineering, Information Systems, etc.) or equivalent experience/combined education.
Regards
Sunil Damagalla
West Advanced Technologies, Inc
E: sunil.d@wati.com - D: 279-666-5837 -
Serving government agencies for 22 Years
www.wati.com 1610 R St, Suite 300, Sacramento, CA 95811

Apply