ZipRecruiter

Log In

1

Incident Response Coordinator Jobs (NOW HIRING)

ASM Research

Incident Response Coordinator

The Incident Response Coordinator supports the end-to-end response to IT incidents and service disruptions, helping restore normal operations quickly and reduce impact on mission-critical systems.

Trend Micro

Incident Response Coordinator

Irving, TX · Hybrid

The Incident Response Coordinator is a role for those experienced with leading, managing and coordinating cybersecurity incident response activities. This role serves as a single point of contact for ...

ASM Research

Incident Response Coordinator, Senior

The Incident Response Coordinator, Senior leads tactical coordination of complex IT incidents to minimize mission impact. The role facilitates disciplined war rooms, enforces cadence and runbooks ...

next page

Showing results 1-20

All JobsGovernment JobsEmergency Services JobsEmergency Services Professional JobsIncident Response Coordinator Jobs

Incident Response Coordinator information

See salary details

$19

$23

$32

How much do incident response coordinator jobs pay per hour?

As of Aug 24, 2026, the average hourly pay for incident response coordinator in the United States is $23.93, according to ZipRecruiter salary data. Most workers in this role earn between $19.95 and $32.21 per hour, depending on experience, location, and employer.

What are the key skills and qualifications needed to thrive as an incident response coordinator?

To thrive as an Incident Response Coordinator, you need a deep understanding of cybersecurity principles, risk assessment, and incident management, often supported by a bachelor’s degree in IT or cybersecurity and relevant certifications like CISSP or GCIH. Familiarity with Security Information and Event Management (SIEM) tools, forensic analysis platforms, and ticketing systems is typically required. Strong analytical thinking, decisive communication, and the ability to stay calm under pressure are vital soft skills for this role. These skills and qualifications ensure effective threat detection, swift response, and minimal impact from security incidents on organizational operations.

What are some common challenges an incident response coordinator faces during a cybersecurity incident, and how are they typically addressed?

Incident Response Coordinators often face challenges such as rapidly identifying the scope of an incident, effectively communicating with stakeholders under pressure, and coordinating cross-functional teams. Managing conflicting priorities and ensuring accurate documentation are also frequent hurdles. These challenges are typically addressed through thorough preparation, such as regularly updated incident response plans, conducting tabletop exercises, and fostering strong relationships with IT, legal, and management teams. Staying calm and organized, as well as leveraging automated tools for detection and reporting, further help coordinators manage incidents efficiently.

What is the difference between Incident Response Coordinator vs Security Analyst?

AspectIncident Response CoordinatorSecurity Analyst
CertificationsCompTIA Security+, CISSP (preferred)CompTIA Security+, GIAC Security Essentials
Work EnvironmentIncident response teams, cybersecurity departmentsSecurity operations centers, IT departments
Employer & IndustryBusinesses, government agencies, cybersecurity firmsOrganizations with IT security needs, tech companies
Primary FocusManaging and coordinating incident response effortsMonitoring, analyzing, and preventing security threats

While both roles focus on cybersecurity, the Incident Response Coordinator primarily manages and coordinates responses to security incidents, ensuring swift resolution. The Security Analyst focuses on monitoring systems, analyzing threats, and implementing preventive measures. Both roles require similar certifications and often work within the same environments, but their core responsibilities differ in scope and focus.

Is incident response coordination a stressful job?

Incident Response Coordinators often work in high-pressure situations that require quick decision-making and problem-solving skills. The job can be stressful due to the need to manage urgent security incidents, but effective training, clear protocols, and teamwork help mitigate stress levels.

Is incident response entry level?

Incident Response Coordinator roles can be entry-level or require several years of experience, depending on the organization. Entry-level positions typically focus on monitoring security alerts and supporting incident investigations, often requiring knowledge of security tools and certifications like CompTIA Security+ or GIAC certifications. More advanced roles may demand specialized skills and experience in cybersecurity incident handling.

What does an incident response coordinator do?

An incident response coordinator manages and coordinates actions during cybersecurity or IT incidents to minimize damage and restore normal operations. They analyze security alerts, develop response plans, communicate with stakeholders, and often use tools like SIEM systems; certifications such as CISSP or SANS are common in this role.
More about Incident Response Coordinator jobs

What cities are hiring for Incident Response Coordinator jobs?

Cities with the most Incident Response Coordinator job openings:

What are the most commonly searched types of Incident Response jobs?

The most popular types of Incident Response jobs are:

Who are the top companies hiring for Incident Response Coordinator jobs?

The top employers for Incident Response Coordinator jobs are:

What states have the most Incident Response Coordinator jobs?

States with the most job openings for Incident Response Coordinator jobs include:

What job categories do people searching Incident Response Coordinator jobs look for?

The top searched job categories for Incident Response Coordinator jobs are:

Incident Response Coordinator jobs near you
Infographic showing various Incident Response Coordinator job openings in the United States as of August 2026, with employment types broken down into 1% As Needed, 83% Full Time, 13% Part Time, 2% Contract, and 1% Nights. Highlights an 91% Physical, 2% Hybrid, and 7% Remote job distribution, with an average salary of $49,768 per year, or $23.9 per hour.

Incident Response Coordinator

Remote

ASM Research
IT Services • 1 - 5K employees

8.6

Company rating: 8.6 out of 10

Based on 14 frontline employees who took The Breakroom Quiz

33rd of 225 rated it services

Great coworkers

People enjoy working here

Good employer

Learn more about ASM Researchexternal

Full-time

Re-posted 10 days ago

Job description

The Incident Response Coordinator supports the end-to-end response to IT incidents and service disruptions, helping restore normal operations quickly and reduce impact on mission-critical systems. The role serves as the central coordination point for incident response activities, ensuring alignment with established incident management processes, service incident models, and enterprise IT objectives in a highly regulated federal environment. The coordinator orchestrates communication among technical teams, vendors, and leadership; provides clear and timely status reporting; and executes functional and hierarchical escalations to Senior Coordinators and the Senior Incident Manager as defined in the incident management practice and Major Incident Process. The coordinator maintains complete, audit-ready documentation throughout the incident lifecycle and contributes to lessons-learned activities and process improvements.
Key Responsibilities
  • Operational Coordination: Organize response efforts across the full end-to-end lifecycle of incidents, high-impact events, and multiple concurrent incidents; set priorities; assign actions; track progress through restoration; maintain disciplined status calls.
  • Runbook & ITSM Execution: Ensure accurate categorization, CI linkage, documentation, and knowledge updates; maintain audit-ready records/timelines, and capture key decisions, timelines, and impacts accurately.
  • Telemetry-Informed Engagement: Use monitoring/ITSM data to route incidents; engage infra/app/cyber/vendor dependencies.
  • Communications & Handoffs: Provide structured internal messaging (leadership updates, stakeholder briefings, and status pages); manage shift handoffs and continuity of incident coordination.
  • PIR Support & Improvement: Help lead PIRs; identify recurring patterns; update runbooks/workflows; track action closure.
  • Escalation Discipline: Elevate deteriorating/unresolved incidents per SLA/escalation guidelines.
  • Evidence Management: Collect/store key decisions, impact summaries, timelines for compliance/audits.
  • Single point of contact: facilitate collaboration for IT incidents between infrastructure, application, cybersecurity, and vendor teams to drive timely resolution.
  • IT service management platforms/ related monitoring tools: track incidents, verify remediation steps, and maintain accurate records required for audits, compliance reviews, and post-incident analysis.
  • Post-incident reviews: participate by identifying systemic issues and recurring patterns, and translate lessons learned into updates to runbooks, workflows, and ITSM configurations.

Required Qualifications
  • Bachelor's degree in information technology, Computer Science, Business Administration, or related field, or equivalent relevant work experience.
  • 4-7 years of experience in incident management, incident response, or related IT operations roles with direct responsibility for coordinating multi-party incident activities.
  • Strong understanding of ITIL-aligned incident management and structured incident response practices, including prioritization, escalation, and lifecycle management.
  • Proficiency with IT service management platforms and monitoring solutions. Ability to manage multiple incidents and communicate clearly in a high-pressure operations center environment.
  • Excellent problem-solving, analytical, written, and verbal communication skills, with the ability to tailor content for both technical staff and business leadership.
  • Active SECRET clearance or ability to obtain and maintain required background investigation; U.S. citizenship required.

Preferred Qualifications
  • ITIL Foundation or similar IT service management certification, ideally combined with training in structured IT or cybersecurity incident response.
  • Hands-on experience coordinating incident response in large enterprise or defense-focused operations centers.
  • Experience contributing to the design or optimization of incident response runbooks, coordination models, and ITSM workflows.

Compensation Ranges
Compensation ranges for ASM Research positions vary depending on multiple factors; including but not limited to, location, skill set, level of education, certifications, client requirements, contract-specific affordability, government clearance and investigation level, and years of experience. The compensation displayed for this role is a general guideline based on these factors and is unique to each role. Monetary compensation is one component of ASM's overall compensation and benefits package for employees.
EEO Requirements
It is the policy of ASM that an individual's race, color, religion, sex, disability, age, sexual orientation or national origin are not and will not be considered in any personnel or management decisions. We affirm our commitment to these fundamental policies.
All recruiting, hiring, training, and promoting for all job classifications is done without regard to race, color, religion, sex, disability, or age. All decisions on employment are made to abide by the principle of equal employment.
Physical Requirements
The physical requirements described in "Knowledge, Skills and Abilities" above are representative of those which must be met by an employee to successfully perform the primary functions of this job. (For example, "light office duties' or "lifting up to 50 pounds" or "some travel" required.) Reasonable accommodations may be made to enable individuals with qualifying disabilities, who are otherwise qualified, to perform the primary functions.
Disclaimer
The preceding job description has been designed to indicate the general nature and level of work performed by employees within this classification. It is not designed to contain or be interpreted as a comprehensive inventory of all duties, responsibilities and qualifications required of employees assigned to this job.

What ASM Research employees say

Pay

Benefits

Hours and flexibility

Workplace

Get the full story on Breakroom

Apply