Remote Incident Response Engineer

100% Remote Incident Response Engineer

6 month contract to start, high possibility of extensions

REQUIRED SKILLS AND EXPERIENCE

• 5+ years of experience investigating and responding to security alerts across endpoint, identity, and cloud environments, including EDR tooling

• Strong understanding of incident response workflows (analysis, containment, remediation, documentation, and escalation procedures)

• Experience working within Axonius to analyze asset data, validate integrations, and improve asset visibility and accuracy.

• Proven ability to validate asset data, identify discrepancies, and uncover visibility gaps across security and IT systems

• Ability to collaborate effectively with security, IT, and engineering teams

NICE TO HAVE SKILLS AND EXPERIENCE

• Experience tuning detections to reduce false positives and improve signal fidelity

• Exposure to security monitoring enhancements, tooling optimization, or automation efforts

• Experience developing queries, dashboards, and reports for security or asset intelligence use cases

• Background contributing to documentation, operational playbooks, and runbooks

• Prior experience in a SOC, IR, or security operations environment

JOB DESCRIPTION

This role plays a critical part in the organization’s security operations program, supporting incident response, threat detection, and asset intelligence across endpoints, identity, and cloud environments. The individual will work closely with security operations, IT, and engineering teams to investigate alerts, respond to incidents, and continuously seek for visibility improvements into enterprise assets using the Axonius platform. On the incident response side, this role is responsible for triaging and analyzing security alerts, validating threats, and supporting containment and remediation efforts in accordance with established incident response procedures. The individual will help ensure incidents are accurately documented, escalated appropriately, and used as learning opportunities to strengthen detection coverage and reduce future risk. From an asset intelligence perspective, this role will support the maintenance of a reliable enterprise asset inventory by analyzing asset data within Axonius, identifying visibility gaps, and escalating integration or data quality issues to appropriate teams. The individual will review data consistency across integrated systems, highlight discrepancies, and collaborate with IT and Engineering partners to drive resolution. Additionally, this role will also contribute to operational improvements by providing feedback on detection quality, supporting monitoring enhancements, and assisting with documentation and playbook updates to ensure consistent and repeatable security processes.