Sign up to access all features of our service.
  • Job search
  • Favorites
  • Create a CV
    New
  • Salaries
  • Subscriptions

Incident Response Lead - Remote

$120.19k - $223.21k

Strada

Our story
Strada is a technology-enabled, people powered company committed to delivering world-class payroll, human capital management, and financial management solutions to organizations globally.

With a team of more than 8,000 experts and over 30 years of expertise, Strada blends leading-edge technology with human ingenuity to help businesses across the globe design and deliver at scale. Supporting over 1,400 customers in 33 countries, Strada partners with customers at every stage of their journey, to help drive their vision forward.

It’s why we’re so driven to connect passion with purpose. Our team’s experience in human insights and cloud technology gives companies and employees around the world the ability to power confident decisions, for life.

With a comprehensive total rewards package, continuing education and training, and tremendous potential with a growing global organization, Strada is the perfect place to put your passion to work.

To learn more about us, visit stradaglobal.com

We are looking for a highly skilled and motivated Incident Response Lead to join our cybersecurity team. This individual will serve as the operational backbone of how Strada handles incidents and ensures Strada is prepared to respond effectively to cybersecurity incidents. This is an individual contributor leadership role with significant cross-functional influence. When things go wrong, you are the person who makes sure the right people are in the room, the right information is flowing, and nothing falls through the cracks. The right person for this role brings structure and rigor to complex situations, drives timely decisions, and helps restore services safely and quickly without waiting for a playbook to be handed to them. This role will strengthen Strada’s incident response readiness by maturing processes, playbooks, escalation paths, exercises, and cross-functional operating mechanisms. You will be a self-starter who turns ambiguity into practical, repeatable operating mechanisms and moves work forward without waiting for detailed direction. The role will partner closely with the SOC Leads, who own monitoring operations, detection engineering, alert triage processes, SIEM management, and SOC team performance.

Key Responsibilities:

Lead Cybersecurity Incident Response

  • Act as incident lead for major cybersecurity incidents, establishing severity, objectives, workstreams, decision rights, communication cadence, and escalation paths.
  • Direct the end-to-end response through validation and scoping, containment, eradication, recovery, and closure, maintaining a clear record of timelines, decisions, actions, and owners.
  • Coordinate security, infrastructure, cloud, identity, network, application, vendor, and business teams to restore affected services safely and validate operational stability and residual risk.
  • Provide concise, timely situation reports and decision recommendations to executives and stakeholders, translating technical findings into business impact and required actions.
  • Partner with Legal, Privacy, Risk, Communications, Human Resources, Business Continuity, and customer-facing teams to meet regulatory, contractual, insurance, notification, and crisis communication obligations.

Build readiness for incidents

  • Own and mature incident response by establishing processes, enhancing tooling, and defining operational standards for handling incidents at scale
  • Continually improve the incident response framework, major-incident plans, escalation criteria, call trees, and response and recovery playbooks, including clear handoffs with other teams.
  • Design and facilitate tabletop exercises and simulations to test technical readiness, decision-making, communications, and recovery arrangements.
  • Perform incident readiness activities, and support additional cybersecurity initiatives as needed in a dynamic global corporate environment

Coach and enable the organization

  • Provide expert guidance on complex incidents and mentor responders, analysts, and technical stakeholders in effective incident management practices.
  • Lead post-incident reviews, assign and track corrective actions, and ensure lessons learned improve controls, architecture, detections, response capability, and operational resilience.
Qualifications and Experience:
  • Have 5+ years of experience in incident management, with direct experience leading high-severity cybersecurity incidents in complex, global, or distributed environments.

  • Have built or significantly shaped an incident response program, ideally in an environment where you had to create structure rather than inherit it

  • Demonstrate a strong sense of ownership and urgency, with the ability to operate independently and make sound decisions under pressure without waiting for direction

  • Are comfortable working in unprecedented situations where processes are still being defined and guidance may be incomplete or conflicting, leaving things better than you found them

  • Have a track record of effective cross-functional collaboration, particularly with technology, product, security, legal, communications, and executive leadership

  • Have experience with cloud infrastructure incidents and enough technical depth across the stack to engage meaningfully with technology teams during response, including comfort navigating distributed systems, monitoring tools, and logs

  • Are analytically minded, with experience using data (incident metrics, queries, trend analysis) to inform decisions during response and to drive operational improvements over time

  • Excellent communication skills with the ability to communicate clearly and calmly under pressure, both in real-time coordination and in post-incident written communications

  • A strong record as a self-starter: you anticipate needs, identify gaps, set priorities, and drive work to completion with limited direction.

  • Strong process-design and documentation skills, including process mapping, runbook development, workflow design, and translating lessons into repeatable operating practices.

  • Proven coaching, facilitation, and change-enablement skills, with the ability to raise the capability and confidence of technical and non-technical stakeholders.

  • Strong knowledge of incident response methodologies and frameworks, including NIST SP 800-61, the SANS incident response lifecycle, and MITRE ATT&CK.

  • Minimum education: Bachelor’s degree or an equivalent combination of education, training, and/or experience

  • Relevant certifications such as CISSP, GCIA, or equivalent are a plus.

What We Offer:
  • An opportunity to play a critical role in building a new cybersecurity organization.
  • A dynamic and collaborative work environment.
  • Professional development and career growth opportunities.
  • Competitive salary and benefits package.
  • Flexible working arrangements.
Join Us:

If you are passionate about cybersecurity, thrive in a dynamic environment, and want to contribute to building a robust security program from the ground up, we encourage you to apply and be part of our journey at Strada Global.

At Strada, our values guide everything we do:

  • Anticipate Customer Needs – We stay ahead of trends so our customers can grow and succeed.

  • Own the Outcome – We take responsibility for delivering excellence and ensuring things get done right.

  • Challenge Ourselves to Work Smarter – We move faster than the world around us to drive change and accomplish more.

  • Empower Each Other to Solve Problems – We tackle challenges head on, ask tough questions, and collaborate to find the best solutions.

  • Care About Our Work – We understand that what we do impacts millions, and we have a responsibility to get it right.

Benefits

At Strada, we support your whole self—offering a range of benefits for your health, wellbeing, finances, and future. These include health coverage, wellbeing programs, paid leave (vacation, sick, parental), retirement plans, learning opportunities, and more.

All offers are contingent on successful completion of background checks, where permitted by law and as appropriate for the role. These may include identity, education, employment, and in some cases, criminal history verification, checks against global watchlists, credit reports, and/or drug testing. You’ll be informed of the specific checks applicable to your role and location during the recruitment process.

Our commitment to Diversity and Inclusion

Strada is dedicated to fostering a diverse, equitable, and inclusive workplace where everyone feels valued and supported. We believe that embracing differences strengthens our teams and drives innovation and success.

Equal Employment Opportunity Statement

Strada is an Equal Opportunity Employer and prohibits discrimination based on legally protected characteristics. We provide reasonable accommodation for disabilities and religious practices. Applicants may request reasonable accommodation by contacting their recruiter.

Authorization to work in the Employing Country

To be considered, you must have current and future work authorization in the country where you’re applying, without the need for visa sponsorship by Strada.

We offer you a competitive total rewards package, continuing education & training, and tremendous potential with a growing worldwide organization.

Salary Pay Range

Minimum - Maximum:

$120,190.00 - $223,210.00

Pay Transparency Statement: Strada considers a variety of factors in determining whether to extend an offer of employment and in setting the appropriate compensation level, including, but not limited to, a candidate’s experience, education, certification/credentials, market data, internal equity, and geography. Strada makes these decisions on an individualized, non-discriminatory basis. Bonus and/or incentive eligibility are determined by role and level.

DISCLAIMER:

Nothing in this job description restricts management’s right to assign or reassign duties and responsibilities of this job to other entities; including but not limited to subsidiaries, partners, or purchasers of Strada business units.

Strada provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, creed, sex, sexual orientation, gender identity, national origin, age, disability, genetic information, pregnancy, childbirth or related medical condition, veteran, marital, parental, citizenship, or domestic partner status, or any other status protected by applicable national, federal, state or local law. Strada is committed to a diverse workforce and is an affirmative action employer.

#J-18808-Ljbffr
Vacancy posted 2 days ago
Similar jobs that could be interesting for youBased on the Incident Response Lead - Remote in United States vacancy
  • $140k - $150k

    Job DescriptionEverforth ECS is seeking an Incident Response Lead to work in our Washington, DC office / remote. The role is contingent upon additional funding.We are seeking a senior-level Incident Response Lead to join our advanced security operations team which is a... 
    Remote work
    Work at office

    ECS Federal

    Washington DC
    8 days ago
  •  ...CrowdStrike, Inc. is seeking an experienced Incident Response Manager to lead consulting teams and manage high-stakes client engagements against advanced threats. You will mentor analysts, guide investigative strategies, and work with executives to drive action. Join... 
    Remote work

    CrowdStrike

    United States
    9 hours ago
  •  ...S2i2 is seeking an Incident Detection and Response Manager (Lead) to head incident response for a high-security environment, with a strong focus on automation...  ...Trust clearance, and offers a flexible, primarily remote work model with periodic headquarters meetings in Washington... 
    Remote work
    Flexible hours

    S2i2 Inc

    United States
    4 days ago
  • $151k - $208k

     ...Palo Alto Networks, Inc. is looking for a Principal Consultant in Burbank, California, responsible for leading incident response and digital forensics services. This role involves serving as a technical leader on investigations and guiding clients through security incidents... 
    Remote work

    Jobleads-US

    Burbank, CA
    4 days ago
  •  ...Greenhouse Software, Inc. is seeking an Incident Response & DFIR Lead to spearhead incident response, containment and forensic activities across endpoints, cloud and identity systems. You will act as Incident Commander for major incidents, coordinate cross-team investigations... 
    Remote work

    JustMarkets

    United States
    2 days ago
  •  ...Tier 3 Incident Response LeadJob#: 3052523Job Description:Tier 3 Incident Response LeadLocation: Salisbury, North Carolina (Remote)Role OverviewThis position is for a Tier 3 Incident Response Lead responsible for providing expert leadership during major security incidents... 
    Remote work

    Apex Systems

    Salisbury, NC
    8 hours ago
  • $147k - $245k

     ...ever. At GE Vernova, the Product Security Incident Response Team (PSIRT) Principal sits at the front...  ...VP of Product Cybersecurity, you will lead GE Vernova's enterprise PSIRT function —...  ...Relocation Assistance Provided: No #LI-Remote - This is a remote positionApplication... 
    Remote work
    Contract work
    Immediate start
    Relocation package

    GE Vernova, Inc.

    Boston, MA
    19 hours ago
  • $135.48k - $227.7k

     ...monitor and respond to security events, lead security incidents as Incident Commander, and lead...  ...will be focused on security incident response, you will also have the opportunity to...  ...term success: a flexible, employee-led remote model, a professional development stipend... 
    Remote work
    Part time
    Flexible hours
    Shift work
    Afternoon shift

    Samsara

    Sacramento, CA
    3 days ago
  •  ...Allstate is recruiting an Incident Management Consultant to join the Enterprise Command...  ...incidents, provide guidance to analysts, and lead rapid response calls to resolution across a range of...  ...and a connectivity reimbursement for remote work. Collaborative teamwork and clear... 
    Remote work
    Shift work

    Allstate

    New York, NY
    3 days ago
  • Google's Mandiant incident response team is seeking an experienced Incident Response Consultant to deliver end-to-end investigations, threat...  ...for clients across cloud and on-prem environments. You will lead engagements, perform forensic analysis, threat hunting, malware... 
    Remote job

    Google

    Cambridge, MA
    2 days ago
  • NTT DATA Services is seeking an Incident Response Security Analysis Specialist Advisor for night shift in Tempe, AZ. You will perform detailed...  ..., and relevant certifications; in-office attendance is preferred three days weekly with remote #J-18808-Ljbffr NTT DATA, Inc.
    Remote job
    Work at office
    Night shift

    NTT DATA, Inc.

    Tempe, AZ
    3 days ago
  • $146k - $155k

     ...and lifestyle bookings for the world’s leading brands in financial services, travel, and...  .... What You’ll Do The Incident Response Program Lead reports to the Information...  ...,000 USD Location This role is remote and can be located anywhere inside the... 
    Remote work
    Full time
    Summer work
    Work from home
    Home office

    iSeatz

    Remote
    4 days ago
  • $126k - $180k

     ...actions based on that analysis. Responsibilities include rapidly responding to potential incidents and events to minimize risk...  ...with policies and regulations. Lead and mentor junior analysts as needed...  ...or client sites, and one remote day per week. Equal Opportunity... 
    Remote work
    Work at office
    Local area
    1 day per week

    MUFG Bank, Ltd.

    Tempe, AZ
    7 hours ago
  • CrowdStrike, Inc. is seeking an Incident Response Manager to lead complex incident response engagements for our clients. You will conduct triage, define objectives, and supervise analysts across Windows, Mac, and Linux environments while interfacing with executives and... 
    Remote job

    CrowdStrike Inc.

    Austin, TX
    2 days ago
  • 1Password seeks a Manager, Security Incident Response to lead a team of responders and builders who engineer automation and tooling for fast, scalable...  ..., comprehensive benefits, equity, and incentive programs. Remote-friendly with cross-border collaboration and strong... 
    Remote work

    1Password LLC

    United States
    3 days ago
  • $140k - $150k

     ...role is contingent upon additional funding. We are seeking a senior-level Everforth ECS is seeking an Incident Response Lead to work in our Washington, DC office / remote . The role is contingent upon additional funding. We are seeking a senior-level Incident Response... 
    Remote work
    Work at office
    Local area

    ECS

    Washington DC
    4 days ago
  • $115k - $160k

     ...to contribute to a culture of responsible AI adoption, experimentation,...  ..., self-driven Engagement Lead to oversee forensic investigations...  ...with both CrowdStrike’s incident response leadership and the leadership...  ...% of the time #LI-AC1 #LI-Remote This role may require the... 
    Remote work
    Full time
    Work experience placement
    Work at office
    Local area
    Worldwide

    CrowdStrike

    Texas
    5 days ago
  •  ...Booz Allen Hamilton is seeking a Cloud Cyber Incident Response Manager to lead multiple incident response teams and oversee complex digital forensic investigations across cloud environments. You will serve as a senior advisor on high-severity incidents, coordinate with... 
    Remote work

    Booz Allen Hamilton

    Bismarck, ND
    7 hours ago
  • $94k - $134k

     ...Security Operations team, focused on Digital Forensics and Incident Response (DFIR). As a Lead Analyst, you will be responsible for leading complex...  ...forensically sound acquisition, including live response and remote collection. Who You Are ~ Calm and decisive... 
    Remote work
    Immediate start
    Work from home
    Worldwide
    Flexible hours

    Gartner

    Irving, TX
    4 days ago
  •  ...CrowdStrike Inc. is seeking an experienced Incident Response Manager to lead complex IR engagements for customers worldwide. You will triage, scope...  ...remediation aligned with a mission-driven security platform. This remote role offers autonomy, a strong focus on innovation, and... 
    Remote work
    Worldwide

    CrowdStrike

    United States
    3 days ago
  •  ...hybrid model of 3 days onsite and 2 days remote (onsite Tuesdays, Wednesdays and a...  ...reporting to the Cyber Monitoring and Incident Response Team Director, you are responsible for...  ...DTCC.Utilize metrics, feedback from team leads, feedback from stakeholders, threat intelligence... 
    Remote work
    Flexible hours

    DTCC- The Depository Trust & Clearing Corporation

    Tampa, FL
    8 days ago
  •  ...Group (MUFG), one of the world’s leading financial groups. Across the...  ...sites four days per week and work remotely one day. A member of our...  ...actions based upon that analysis. Responsibilities include rapidly responding to potential incidents and events to minimize risk exposure... 
    Remote work
    Full time
    Work at office
    Local area
    1 day per week

    MUFG

    Tempe, AZ
    8 days ago
  •  ...hybrid model of 3 days onsite and 2 days remote (onsite Tuesdays, Wednesdays and a...  ...reporting to the Cyber Monitoring and Incident Response Team Director, you are responsible for...  ...DTCC. Utilize metrics, feedback from team leads, feedback from stakeholders, threat intelligence... 
    Remote work
    Flexible hours

    The Depository Trust & Clearing Corporation

    Tampa, FL
    3 days ago
  •  ...PNC is seeking an Incident & Problem Consultant within the First Response SRC to lead major IT incidents and coordinate rapid resolutions. The role supports both incident...  ..., including online banking platforms. Some remote work in select locations is possible. The ideal... 
    Remote work

    3M HEALTHCARE

    New York, NY
    4 days ago
  •  ...Allstate is seeking an Incident Management Consultant within the Enterprise Command Center to handle complex major incidents and guide...  ...team through resolution. The role emphasizes diagnostics, rapid response leadership, and cross-functional coordination. Roles include four... 
    Remote work
    Full time
    Shift work

    Allstate Foundation

    Springfield, IL
    7 hours ago
  • $103.9k - $145.53k

     ...Cacheflow is seeking an Incident Manager to lead critical production incidents while communicating effectively with customers and internal teams...  ...and participate in continuous improvement of incident response efforts. Benefits include a competitive salary range of... 
    Remote work

    Cacheflow

    United States
    2 days ago
  • $115k - $130k

     ...is currently hiring for a SPOC Major Incident Lead for our newly awarded TSA Focus contract...  ...support, and providing advanced remote desktop support. Coordinates, orchestrates...  ...This is a fully remote position Responsibilities Responsibilities Provides expert... 
    Remote work
    Contract work
    Currently hiring
    Immediate start

    GovCIO

    United States
    3 hours ago
  •  ...Nova Infra Invest is seeking a full-time remote Chief Information Security Officer to lead the company’s information security strategy and operations...  ...will manage security vendors and tools, drive incident detection and response, and promote security awareness across... 
    Remote work
    Full time

    Nova Infra Invest

    United States
    6 hours ago
  •  ...ViziRecruiter, LLC. is hiring a Major Incident Management Analyst in Chicago, IL. This position focuses on leading responses to major incidents and ensuring effective communication...  ...work schedule includes 3 in-person and 2 remote days. Candidates should possess a Bachelor’s... 
    Remote work
    Flexible hours

    Ahold Delhaize

    Chicago, IL
    4 days ago
  •  ...tomorrow. In this job, you’ll serve as Cybersecurity Incident Response Team (CSIRT) Coordinator, leading the coordination of incident response activities...  ...facility for a set number of days with the option to work remotely on the remaining days.  Unless otherwise noted,... 
    Remote work
    Work at office
    Relocation

    Edison International

    Rosemead, CA
    7 days ago

Do you want to receive more vacancies?

Subscribe and receive similar vacancies to Incident Response Lead - Remote. Be the first to apply!