Remote Cybersecurity Incident Response Lead

Gaijinent; United States; Remote; USD 120,000 - 180,000; Full time

Benefits offered by this job

Remote work

Health insurance

Job summary

Gaijin is seeking an Information Security specialist to own incidents end to end, from detection to post-incident analysis, across cloud and on‑prem infrastructure. You will lead incident response, develop playbooks, and drive improvements in security controls.

The role requires strong experience in SIEM, security audits, cloud security (AWS), and Linux/Windows server environments. Remote work with international teams is offered, plus health coverage.

Responsibilities

• Incident management from detection to post-incident analysis.
• Security risk assessment of cloud and network infrastructure.
• Maintaining documentation and monitoring compliance with security policies.
• Remediating discovered vulnerabilities and monitoring closure.
• SIEM monitoring and custom correlation rule development.
• Investigating incidents and implementing preventive measures.
• Analyzing security issues in network and cloud resources.
• Coordinating incident response and developing playbooks.
• Identifying security gaps and providing remediation recommendations.

Skills

Incident investigation

SIEM expertise

Security audits

Server hardening

Cloud security (AWS)

Container security

IAM / least privilege

Network security

Linux (RHEL/Debian)

Windows Server

Russian language

Tools

AWS

Wazuh

LDAP/FreeIPA IAM tools

Job description

Gaijin is seeking an Information Security specialist to own incidents end to end, from detection to post-incident analysis, across cloud and on‑prem infrastructure. You will lead incident response, develop playbooks, and drive improvements in security controls.

The role requires strong experience in SIEM, security audits, cloud security (AWS), and Linux/Windows server environments. Remote work with international teams is offered, plus health coverage.