ZipRecruiter

Log In

2

Remote Incident Response Jobs (NOW HIRING)

ASM Research

Incident Response Coordinator, Senior

The Incident Response Coordinator, Senior leads tactical coordination of complex IT incidents to minimize mission impact. The role facilitates disciplined war rooms, enforces cadence and runbooks ...

Avaya

SOC Analyst & Incident Response Lead

OR · On-site +1

Incident Response Lead Duties * Lead and coordinate the end-to-end incident response lifecycle, from detection through containment, eradication, and recovery. * Own and maintain IR documentation ...

Irongate Cybersecurity

Be Seen First

Digital Forensics & Incident Response Director

Mclean, VA · Remote

This leadership role is responsible for overseeing complex incident response engagements, ensuring high-quality deliverables, and mentoring a team of skilled analysts. The ideal candidate possesses ...

Irongate Cybersecurity

Be Seen First

Digital Forensics & Incident Response Managing Consultant

Mclean, VA · Remote

$150K - $160K/yr

Lead digital forensics and incident response investigations from start to finish. * Participate in or lead scoping calls to define project scope and objectives. * Provide clear, timely verbal and ...

next page

Showing results 1-20

All JobsRemote Incident Response Jobs

Remote Incident Response information

See salary details

$17

$41

$66

How much do remote incident response jobs pay per hour?

As of Jul 3, 2026, the average hourly pay for remote incident response in the United States is $41.73, according to ZipRecruiter salary data. Most workers in this role earn between $29.33 and $47.60 per hour, depending on experience, location, and employer.

What jobs in the US pay 300,000 a year?

In the field of remote incident response, senior cybersecurity professionals such as incident response managers, security architects, and chief information security officers can earn $300,000 or more annually, especially with extensive experience, certifications like CISSP or CISM, and leadership roles. High-level cybersecurity roles often involve managing security incidents, developing response strategies, and overseeing security teams in organizations with complex IT environments.

How can I make 2000 a week working from home?

Remote incident response professionals can earn $2,000 or more weekly by handling high-volume security incidents, often requiring specialized skills, certifications, and experience. Earning this income typically involves working full-time, sometimes on a contract basis, and utilizing skills in cybersecurity tools and threat analysis. Building a strong reputation and gaining certifications like CISSP or GIAC can help increase earning potential in this field.

What are the key skills and qualifications needed to thrive as a Remote Incident Response specialist, and why are they important?

To thrive as a Remote Incident Response specialist, you need a solid understanding of cybersecurity principles, threat analysis, and incident handling, typically supported by a degree in information security or relevant certifications like CISSP or GIAC. Familiarity with security information and event management (SIEM) tools, forensics software, and remote communication platforms is crucial. Strong analytical thinking, problem-solving abilities, and clear communication skills are essential for effectively managing incidents and collaborating with distributed teams. These skills and qualities are important to ensure timely detection, containment, and resolution of security incidents, minimizing organizational risk.

Can I make $200 a year in cyber security?

Remote incident response professionals typically earn significantly more than $200 annually, with entry-level salaries often starting around $50,000 and increasing with experience and certifications. Earning $200 per year would be unrealistic in this field, as it is a high-demand role requiring specialized skills, tools, and ongoing training.

What is remote incident response?

Remote incident response refers to the process where cybersecurity professionals detect, investigate, and resolve security incidents from a remote location, rather than being physically present at the affected site. This approach leverages specialized tools and secure communication channels to analyze threats, contain breaches, and restore normal operations. Remote incident response allows organizations to quickly access expert support regardless of their location, which is especially valuable for distributed workforces or organizations without in-house security teams.

How to get a job in incident response?

To get a job in incident response, candidates typically need a strong understanding of cybersecurity principles, network protocols, and threat detection tools. Relevant certifications such as CISSP, GIAC, or CompTIA Security+ can improve prospects, along with hands-on experience in security operations or digital forensics. Developing skills in analyzing security incidents and familiarity with security information and event management (SIEM) systems are also valuable.

What is the difference between Remote Incident Response vs Remote Security Analyst?

AspectRemote Incident ResponseRemote Security Analyst
CertificationsGCIH, CISSP, CEHCISSP, Security+, CEH
Work EnvironmentResponds to security incidents, investigates breachesMonitors security systems, analyzes threats
Industry UsageIncident handling teams, cybersecurity firmsSecurity operations centers, IT departments
Search IntentIncident response, breach investigationSecurity monitoring, threat analysis

Remote Incident Response specialists focus on investigating and mitigating security breaches, while Remote Security Analysts monitor systems and analyze threats. Both roles require similar certifications and often work within cybersecurity teams, but their core responsibilities differ in scope and focus.

What Are Remote Incident Response Jobs?

Remote incident response jobs include positions such as remote incident response consultant, remote incident response manager, remote senior project manager, and remote incident response analyst. All of these jobs have different duties and responsibilities, but the main focus is to respond quickly to cybersecurity attacks or to advise companies or organizations on how to prevent and digital manage threats. Some work from home incident response analysts monitor systems and advise their clients whenever a breach occurs or is likely to occur. Instead of working in the office, remote incident response jobs work from home or another location outside of the office with internet connectivity. But they must be able to respond quickly to system problems that arise.

What are some common challenges faced in a remote incident response role, and how can they be effectively managed?

Remote incident response professionals often encounter challenges such as coordinating with distributed teams across different time zones, ensuring secure and reliable access to affected systems, and maintaining clear and timely communication during high-pressure situations. To manage these challenges, it's vital to establish well-documented response procedures, utilize secure remote access tools, and leverage collaboration platforms for real-time updates. Regular training exercises and clear escalation paths also help ensure the team can respond efficiently, regardless of their physical location.
More about Remote Incident Response jobs
What cities are hiring for Remote Incident Response jobs? Cities with the most Remote Incident Response job openings:
What are the most commonly searched types of Incident Response jobs? The most popular types of Incident Response jobs are:
What states have the most Remote Incident Response jobs? States with the most job openings for Remote Incident Response jobs include:
What job categories do people searching Remote Incident Response jobs look for? The top searched job categories for Remote Incident Response jobs are:
Remote Incident Response jobs near you
Infographic showing various Remote Incident Response job openings in the United States as of June 2026, with employment types broken down into 97% Full Time, 2% Part Time, and 1% Contract. Highlights an 37% Physical, 3% Hybrid, and 60% Remote job distribution, with an average salary of $86,808 per year, or $41.7 per hour.
Senior Incident Response Consultant

Senior Incident Response Consultant

Zurich Insurance Group

MO • Remote

Other

Posted 5 days ago

Job description

This role joins SpearTip, the cybersecurity consulting segment within Zurich Resilience Solutions. Blending cutting-edge technologies, unique skill sets, and proven cyber counterintelligence strategies, SpearTip partners with our clients to protect shareholder value, shield corporate reputations, and enhance long-term profits.  We are driven to protect our clients from the ever-changing threat actors and become the gold standard in detecting zero-day vulnerabilities. In this role you make work virtual within the U.S. and extend up to 20% travel.

As a Senior Incident Response Consultant, you will deliver expert incident response and digital forensics services to external clients experiencing cyber security incidents. Leads complex investigations, provides strategic guidance during security breaches, and drives incident containment and recovery efforts. Maintains 75% billable utilization while delivering exceptional client service and building long-term client relationships. The job's core deliverables rely on delivering expert consulting services to external clients during high-stress security incidents. Requires building trust with C-level executives, IT leaders, legal counsel, and insurance partners while managing complex multi-stakeholder relationships during crisis situations.

Key Accountabilities:

  • Lead incident response engagements for external clients, conducting digital forensics investigations, malware analysis, and threat actor attribution to identify scope, impact, and root cause of security incidents.
  • Provide 24/7 on-call emergency response services, rapidly deploying to client sites or remotely connecting to contain active threats, preserve evidence, and minimize business disruption.
  • Conduct comprehensive forensic examinations of compromised systems, networks, and cloud environments using industry-standard tools and methodologies to support client remediation and potential legal proceedings.
  • Deliver executive-level briefings and written reports to clients, translating complex technical findings into business impact assessments and actionable recommendations.
  • Coordinate with client stakeholders including IT teams, legal counsel, insurance carriers, law enforcement, and executive leadership to manage incident response activities and communication strategies.
  • Provide expert guidance on ransomware negotiations, business email compromise investigations, insider threat cases, and advanced persistent threat incidents.
  • Develop and deliver incident response retainer services, conducting proactive readiness assessments, tabletop exercises, and security program evaluations for client organizations.
  • Mentor junior consultants and analysts, providing technical guidance and quality assurance on client deliverables.
  • Maintain detailed case documentation, time tracking, and engagement status reporting to ensure accurate billing and project management.
  • Partner with insurance brokers, managed service providers, and law firms to provide incident response services as part of cyber insurance claims and breach response protocols.
  • Stay current on emerging threats, attack techniques, and forensic methodologies through continuous research and professional development.
  • Contribute to thought leadership initiatives including blog posts, conference presentations, and client education materials.
  • Business Travel, as required (may be extensive during active incidents) as well as extended hours during Active Incidents/24x7 On-call Rotation, flexible scheduling to accommodate client emergencies and time-sensitive investigations, as required.

  Additional Business Accountabilities:

  • Develop scopes of work and cost estimates for incident response engagements, ensuring projects are appropriately resourced and profitably delivered.
  • Identify opportunities for expanded client engagements based on investigation findings, security gaps, and client needs.
  • Support business development activities including client presentations, capability demonstrations, and proposal development for new and existing clients.
  • Ensure all client deliverables meet quality standards and are delivered within agreed timelines and budgets.

Basic Qualifications:

  • Bachelors degree and 5 or more years experience in the Information Technology area
    OR
  • Zurich Cybersecurity Technician Apprentice, including Cyber Security Certification and 6 or more years experience in the Information Technology area
    OR
  • High School Diploma or Equivalent and 7 or more years experience in the Information Technology area
    AND
  • MS Office experience
    AND
  • Knowledge of Cyber Security Operations

 

Preferred Functional/Technical Skills Qualifications:

  • Digital Forensics & Incident Response - Proficiency Level Advanced
  • Threat Intelligence & Malware Analysis - Proficiency Level Intermediate
  • Client Communication & Stakeholder Management - Proficiency Level Advanced
  • Windows/Linux System Forensics - Proficiency Level Advanced
  • Network Forensics & Log Analysis - Proficiency Level Intermediate
  • Cloud Security (Azure/AWS/M365) - Proficiency Level Intermediate
  • Forensic Tool Proficiency (EnCase, FTK, X-Ways, Volatility, etc.) - Proficiency Level Advanced
  • Ransomware & BEC Investigations - Proficiency Level Advanced
  • Report Writing & Executive Communication - Proficiency Level Advanced
  • Project Management - Proficiency Level Intermediate

Your pay at Zurich is based on your role, location, skills, and experience. We follow local laws to ensure fair compensation. You may also be eligible for bonuses and merit increases. If your expectations are above the listed range, we still encourage you to apply-your unique background matters to us. The pay range shown is a national average and may vary by location. The proposed Salary range for this position is $100,200.00 - $164,100.00, with short-term incentive bonus eligibility set at 15%. 

We offer competitive pay and comprehensive benefits for employees and their families. [Learn more about Total Rewards here.]

 

Why Zurich?

At Zurich, we value your ideas and experience. We offer growth, inclusion, and a supportive environment-so you can help shape the future of insurance. Zurich North America is a leader in risk management, with over 150 years of expertise and coverage across 25+ industries, including 90% of the Fortune 500.

Join us for a brighter future-for yourself and our customers.

Zurich in North America does not discriminate based on race, ethnicity, color, religion, national origin, sex, gender expression, gender identity, genetic information, age, disability, protected veteran status, marital status, sexual orientation, pregnancy or other characteristics protected by applicable law. Equal Opportunity Employer disability/vets.

Zurich complies with 18 U.S. Code 1033.

 

Please note: Zurich does not accept unsolicited CVs from agencies. Preferred vendors should use our Recruiting Agency Portal.

Location(s): AM - Missouri Virtual Office, AM - Remote Work (US)
Remote Working: Hybrid
Schedule: Full Time
Employment Sponsorship Offered: No  
Linkedin Recruiter Tag: #LI-AW1 #LI-ASSOCIATE #LI-REMOTE 

Apply