> Markdown version of [/jobs/ext/3140776-tier-3-incident-response-lead](https://www.wearedevelopers.com/jobs/ext/3140776-tier-3-incident-response-lead). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Tier 3 Incident Response Lead

- **Company:** Everforth Apex
- **Location:** Salisbury, NC, United States (Remote available)
- **Experience:** Expert
- **Contract:** Permanent contract
- **Skills:** Microsoft Security Essentials, Cloud Services, 3-tier Architectures
- **Published:** September 29, 2026
- **Apply:** https://www.dice.com/job-detail/211f745f-4977-4a25-a86e-7c966d0c37b2

## About the Role

* Proven experience in Tier 3 incident response, focusing on coordinating major incidents rather than routine SOC analysis.
 * Demonstrated experience leading incident response efforts, coordinating stakeholders, and reporting findings to executive leadership.
 * Leadership experience, including training and mentoring junior team members.

Technical Skills:

 * Proficiency with the Microsoft Security Suite, including MS Defender and XDR solutions.
 * Strong investigative mindset with the ability to analyze and correlate data from various security tools.

## Description

This position is for a Tier 3 Incident Response Lead responsible for providing expert leadership during major security incidents. The role involves driving rapid detection, triage, containment, and eradication activities. The ideal candidate will possess a strong investigative mindset and have experience coordinating incidents and stakeholders, including communicating effectively with executive leadership., * Lead and coordinate security incident response operations from initial alert triage through closure.

 * Direct containment actions, including host isolation, account disablement, and network blocks.
 * Assume technical leadership for assigned incidents by directing investigative priorities and coordinating participating teams.
 * Execute deep incident investigations across endpoints, servers, cloud services, and network telemetry.
 * Communicate status and risk to technical teams and senior stakeholders.
 * Produce high-quality incident reports, impact analyses, and executive summaries.
 * Mentor junior responders and analysts, providing coaching on investigative techniques and stakeholder management.
 * Develop, maintain, and continuously improve Incident Response runbooks and playbooks.


## Related Videos

- [Leverage Cloud Computing Benefits with Serverless Multi-Cloud ML ](https://www.wearedevelopers.com/videos/78-leverage-cloud-computing-benefits-with-serverless-multi-cloud-ml)
- [Building Multi-Tenant ASP.NET Core Applications: Best Practices and Real-World Solutions](https://www.wearedevelopers.com/videos/1552-building-multi-tenant-asp-net-core-applications-best-practices-and-real-world-solutions)
- [Applying Agile Principles to Incident Management ](https://www.wearedevelopers.com/videos/101-applying-agile-principles-to-incident-management)
- [Develop enterprise-ready applications for Microsoft Teams with Azure resources on modern web technologies](https://www.wearedevelopers.com/videos/187-develop-enterprise-ready-applications-for-microsoft-teams-with-azure-resources-on-modern-web-technologies)
- [ZEISS & Microsoft - Building the Next Generation Medical Ecosystem in the Cloud](https://www.wearedevelopers.com/videos/424-zeiss-microsoft-building-the-next-generation-medical-ecosystem-in-the-cloud)
- [Hacking MSSQL on Cloud. All of them. How I became sysadmin on Azure, AWS, GCP and Alibaba.](https://www.wearedevelopers.com/videos/100339-hacking-mssql-on-cloud-all-of-them-how-i-became-sysadmin-on-azure-aws-gcp-and-alibaba)

## Related Articles

- [The Geometry of Incidents: Connecting User Impact to Architecture](https://www.wearedevelopers.com/magazine/764-the-geometry-of-incidents-connecting-user-impact-to-architecture)
- [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers)
- [What’s the Difference between a Junior, Mid, and Senior Developer?](https://www.wearedevelopers.com/magazine/238-what-s-the-difference-between-a-junior-mid-and-senior-developer)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Why Upskilling And Reskilling is Important For Developers](https://www.wearedevelopers.com/magazine/428-why-upskilling-and-reskilling-is-important-for-developers)
- [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs)