> Markdown version of [/jobs/ext/3384207-cyber-incident-response-engineer](https://www.wearedevelopers.com/jobs/ext/3384207-cyber-incident-response-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Cyber Incident Response Engineer

- **Company:** Zions Bancorporation
- **Location:** Midvale, UT, United States (Remote available)
- **Experience:** Expert
- **Contract:** Permanent contract
- **Skills:** JavaScript (Programming Language), Microsoft Windows, Cyber Security, R (Programming Language), Apache Hive, Intrusion Detection Systems, Python (Programming Language), Linux System Administration, ArcSight SIEM Tool, Runbook, Security Software, Security Information and Event Management, Scripting, QRadar, Splunk, Vulnerability Analysis
- **Published:** September 21, 2026
- **Apply:** https://www.dice.com/job-detail/420ee130-e75f-4088-95b3-7fb2675a391c

## About the Role

* Hands-on technical experience with one or more commercial SIEM products such as Splunk (preferred), IBM QRadar, LogRhythm, ArcSight, NetWitness, etc., which should include familiarity with defining and writing alert conditions/use cases in addition to daily use for investigating incidents
 * Experience producing technical documentation, standard operating procedures, and incident response playbooks
 * Expert technical knowledge in networking, Windows administration, Linux administration, common attack techniques and preventions
 * Advanced working knowledge of common attack vectors, different classes of attacks (e.g., passive, active, insider, close-in, distributed, etc.) and general attack stages (e.g., foot printing and scanning, enumeration, gaining access, escalation or privileges, maintaining access, network exploitation, covering tracks, etc.)
 * Advanced knowledge of system administration concepts for UNIX/Linux and Windows operating systems
 * Development experience with scripting languages such as R, HIVE, Python, JavaScript, etc., is a plus
 * Experience with any Endpoint Detection and Response platform is a plus
 * Relevant advanced technical certifications are a plus (ex: SANS, ISC2) with 5+ years of relevant experience in one or more technical cybersecurity domains (combination of education and experience, such as 6-8 years of relevant experience or equivalent education may meet qualifications)

## Description

The Senior Cyber Incident Response Engineer will join our CSOC Team. The Cybersecurity Operations Center (CSOC) team is the cyber front line at Zions Bancorporation. If you want to work on a team where your input matters, you get to collaborate with sharp colleagues with whom you will grow, where your work is truly valued and you make a real difference, then you will be in good company.

As a Senior Cyber Incident Response Engineer you will play a key role in defending the enterprise from malicious actors. The work you do has real impact customer-wide and enterprise-wide and it is truly valued by both.

The Senior Cyber Incident Response Engineer will:

 * Act as key contributor in the CSOC's growth and evolution, actively improving our cyber incident response capabilities
 * Respond to cybersecurity incidents, especially as an escalation point for high-priority or highly complex incidents
 * Function as subject matter expert in multiple cybersecurity tools and processes such as SIEM, IDS, EDR, DLP, WAF and similar
 * Develop and implement monitoring use cases, cyber incident response procedures, playbooks and other technical documentation
 * Collaborate with Enterprise Cybersecurity Architecture and technology teams in monitoring and alerting infrastructure, processes, and tools
 * Train, mentor and guide other team members (across both the CSOC and other EIS teams) on cyber incident response practices, tooling, and capabilities
 * Participate in the on-call rotation so we can maintain 24/7 coverage in responding to alerts and possible threats
 * Other duties as assigned