> Markdown version of [/jobs/ext/2271393-security-engineer-incident-response](https://www.wearedevelopers.com/jobs/ext/2271393-security-engineer-incident-response). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Security Engineer / Incident Response

- **Company:** THE JUDGE GROUP, INC.
- **Location:** Cincinnati, OH, United States
- **Experience:** Expert
- **Salary:** $124,800.0 - $145,600.0
- **Contract:** Permanent contract
- **Skills:** Amazon Web Services, Microsoft Azure, Cyber Security, Intrusion Detection and Prevention, Runbook, Security Information and Event Management, Data Logging, Google Cloud, Cloud Platform System, Mitre Att&ck, Security Orchestration, Automation & Response
- **Published:** August 27, 2026
- **Apply:** https://www.dice.com/job-detail/9e9dffb7-2407-4a9a-9e62-fe93dd6ff93b

## About the Role

* Strong experience in Security Operations, security investigations, and incident response
 * Hands-on experience investigating and responding to security events and incidents
 * Experience supporting containment, eradication, and recovery activities
 * Experience with security alerts and detections
 * Experience developing or maintaining security playbooks and/or runbooks
 * Understanding of Security Operations tooling such as SIEM/SOAR, EDR, email security gateways, and firewalls
 * Strong critical-thinking and problem-solving skills
 * Ability to break down complex technical topics and communicate them clearly to technical and non-technical audiences
 * Strong written and verbal communication skills
 * Demonstrated leadership within an individual contributor role
 * Experience mentoring junior team members

Nice-to-Haves:

 * Experience with detection engineering
 * Experience with rule or alert tuning
 * Familiarity with the MITRE ATT&CK framework, including mapping security activity or detections to relevant tactics and techniques
 * Experience with cloud environments such as Azure, Google Cloud Platform, or AWS
 * Familiarity with Google Security Operations
 * Experience contributing to tabletop exercises or security audits

## Description

* Lead containment, eradication, and recovery efforts for endpoint, cloud, identity, and other security incidents
 * Serve as an escalation point for complex security events and incidents
 * Investigate security events and determine appropriate response actions
 * Contribute to the development and improvement of security playbooks and runbooks
 * Provide feedback to the Detection team to improve the quality of detections, enrichment, and automated response
 * Collaborate with cross-functional teams to improve logging visibility and response readiness
 * Contribute to operational maturity through playbooks, mentoring, tabletop exercises, detections, and audits
 * Mentor junior team members and help build their Security Operations capabilities
 * Communicate technical information effectively to both technical and non-technical stakeholders


## Related Videos

- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Technical Documentation - How Can I Write Them Better and Why Should I Care?](https://www.wearedevelopers.com/videos/681-technical-documentation-how-can-i-write-them-better-and-why-should-i-care)
- [The Cloud is Calling: Answer with In-Demand Skills](https://www.wearedevelopers.com/videos/945-the-cloud-is-calling-answer-with-in-demand-skills)
- [Crypto-secure Data Management with In-Database Blockchain](https://www.wearedevelopers.com/videos/632-crypto-secure-data-management-with-in-database-blockchain)
- [Checkmate: 5 Real Incidents That Can End a Software Company](https://www.wearedevelopers.com/videos/100126-checkmate-5-real-incidents-that-can-end-a-software-company)
- [Bridging AI and Nomad: a Go-based MCP Server for Cluster Control](https://www.wearedevelopers.com/videos/2063-bridging-ai-and-nomad-a-go-based-mcp-server-for-cluster-control)

## Related Articles

- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [Where To Find Software Engineering Jobs](https://www.wearedevelopers.com/magazine/396-where-to-find-software-engineering-jobs)
- [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs)
- [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again)