> Markdown version of [/jobs/ext/4167226-sr-incident-response-engineer](https://www.wearedevelopers.com/jobs/ext/4167226-sr-incident-response-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Sr. Incident Response Engineer - **Company:** Frontdoor - **Location:** United States (Remote available) - **Experience:** Expert - **Salary:** $133,000.0 - $155,000.0 - **Contract:** Permanent contract - **Skills:** Microsoft Windows, Amazon Web Services, Apple Mac Systems, Microsoft Azure, Bash Shell, Cloud Computing Security, Cyber Security, Computer Programming, Information Leak Prevention, Desktop Computing, Python (Programming Language), Networking Basics, Anti-Phishing, Shell Script, Data Logging, Scripting, Google Cloud, Kubernetes, Information Technology, Palo Alto Networks, Oracle Cloud Infrastructure, Splunk, Docker, Security Orchestration, Automation & Response - **Published:** October 31, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=2aad24a766fc1602 ## About the Role * To excel in this role, you should have * At least 8 years in security with 3 of those in incident response * Experience running incidents from a security responder point of view * Excellent communication skills * An eagerness to partner with other teams and an understanding that security means the proper application of friction, not just speed bumps and blockers. * Excellent mentoring and teaching skills and an overall eagerness to help guide more jr engineers into more senior roles. * You should be a cooler in tense situations regarding incidents, level of risk acceptance, and how to manage work during these situations in order to provide investigatory support to the organization. * Experience using a logging platform like LogScale, ELK or Splunk * Experience with cloud security in AWS, GCP, Azure or Oracle Cloud. * Deep experience in EDR or XDR and tools like Crowdstrike, CarbonBlack, SentinleOne etc * Experience with container security, meaning you have created, understand the process and know what to do, where to look, how processes inside a container are viewed from the OS/Host level., * Network Fundamentals * Windows OS Internals * Mac OS Internals * Data Leakage Prevention - Classification to Containment to Remediation * 7 years in the security field with 3 of those years in Incident Response * Strong writing skills and communication skills. * Demonstrated ability to think strategically and make effective and timely decisions. Technology and Systems: * AWS, GCP, and Azure cloud infrastructure * Docker, Kubernetes * Logscale, Elastic, Tines or another Automation tool * Zscaler, Palo Alto Networks * Programming / Scripting * Python, Bash, Shell Script Preferred Skills: * Experience with cloud security incident response in AWS or similar environments. * Familiarity with threat intelligence platforms and external threat feeds. * Experience supporting investigations involving data exfiltration or insider risk. * Exposure to security automation, alert enrichment, or response orchestration tools. * Knowledge of email security platforms and phishing response workflows. Physical Role Requirements : Be seated at a computer intermittently for up to eight hours a day. Move up to 10 pounds occasionally, by lifting, carrying, pushing, pulling, or otherwise repositioning objects. Sitting for long periods of time while using office equipment such as computers and phones. Repetitive motions using hands and digits, such as movement of wrists, hands and fingers while picking, pinching and typing during your normal working environment. Minimum Education, Licensure and Professional Certification requirements: Bachelor's degree required in computer science,cybersecurity, IT or related field Minimum Experience required : 7+ years of experience required in Security Operations, Incident Response, or Security Engineering roles. ## Description Summary: As a Senior Incident Response Engineer, you will work with a team of highly capable engineers with various degrees of experience in a newly formed IR practice. The team lives the mantra of "We don't make insecure impossible, we make secure irresistible" as they manage IR duties and engineering in a remote first, cloud native company. The engineer conducts full-cycle incident response activities-such as alert triage, investigation, containment, remediation, and reporting-while ensuring sensitive cases are managed with proper approvals and confidentiality. Additionally, the position requires strong technical and communication skills, supports process improvements and documentation, and focuses on automating routine investigations to enhance the organization's security posture and enable more impactful responses.