> Markdown version of [/jobs/ext/3729090-incident-detection-response-analyst](https://www.wearedevelopers.com/jobs/ext/3729090-incident-detection-response-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Incident Detection / Response Analyst

- **Company:** Delviom LLC
- **Location:** United States (Remote available)
- **Contract:** Permanent contract
- **Skills:** Digital Forensics, Monitoring of Systems, Networking Hardware, Intrusion Detection and Prevention, Intrusion Detection Systems, Network Security, Log Analysis, Packet Analyzer, Anti-Phishing, Security Information and Event Management, Software Vulnerability Management, Mitre Att&ck, Falcon Platform, Microsoft Sentinel, Splunk, Security Orchestration, Automation & Response
- **Published:** October 14, 2026
- **Apply:** https://www.dice.com/job-detail/48e677d6-f7d9-401e-bee7-39ca4258e8b4

## About the Role

* Advanced experience performing incident detection, security event analysis, threat investigation, incident containment, and response across enterprise IT environments.
 * Strong hands-on experience with SIEM, EDR, SOAR, IDS/IPS, and network security monitoring tools, including Splunk, Microsoft Sentinel, CrowdStrike, and similar platforms.
 * Expertise investigating suspicious authentication activity, malware infections, phishing attempts, credential theft, lateral movement, unauthorized access, and network intrusions.
 * Ability to correlate security events from endpoints, firewalls, cloud platforms, identity systems, and network devices to identify attack patterns.
 * Experience with digital forensic triage, log analysis, packet analysis, malicious artifact investigation, and incident evidence collection.
 * Proficiency in developing and tuning security detection rules, alert correlation logic, use cases, and automated response playbooks.
 * Experience supporting incident containment, vulnerability remediation, root cause analysis, recovery validation, and post-incident reporting.
 * Strong understanding of MITRE ATT&CK, NIST incident response guidance, threat intelligence, and federal cybersecurity requirements.