Senior Incident Response Engineer - Remote/Hybrid

LinkedIn; United States; Hybrid; USD 129,000 - 212,000; Full time

Benefits offered by this job

Annual bonus

Stock plans

Benefits

Job summary

LinkedIn is seeking a Senior Incident Response Engineer to join our Information Security organization. You will independently triage alerts, investigate incidents, and lead large-scale incidents across teams to containment and remediation, mentored by senior staff.

The role supports hybrid or remote work anywhere in the United States and may involve on-call duties. The team emphasizes continuous improvement, playbook development, and proactive data sharing with stakeholders.

Qualifications

• BA/BS degree in Information Security, CyberSecurity, Computer Science, or related discipline, or equivalent practical experience.
• 4+ years in Information Security with 3+ years in Incident Response.
• Experience triaging security alerts and managing incident lifecycle.
• Experience with SIEM, logs, and EDR across Windows, Unix, and macOS.

Responsibilities

• Triage security alerts and incident reports independently.
• Investigate incidents using forensic and threat hunting techniques.
• Drive small to medium incidents with cross-team collaboration to closure.
• Conduct host, network, and log analysis to support investigations.
• Enhance in-house IR platforms and build new capabilities.
• Participate in on-call activities.
• Collaborate with PR, HR, Legal, Compliance, Investigations, Eng., and other teams.
• Lead large-scale incidents and mentor junior staff.
• Improve processes, procedures, and detection quality.
• Provide proactive data to stakeholders for internal comms.

Skills

Information Security

Incident Response

Threat Hunting

SOAR/Security Orchestration

Education

BA/BS in Information Security or related field

Master’s degree (preferred)

Tools

SIEM

EDR

Log Analysis

Windows Logs

Unix Logs

Web Server Logs

Job description

LinkedIn is seeking a Senior Incident Response Engineer to join our Information Security organization. You will independently triage alerts, investigate incidents, and lead large-scale incidents across teams to containment and remediation, mentored by senior staff.

The role supports hybrid or remote work anywhere in the United States and may involve on-call duties. The team emphasizes continuous improvement, playbook development, and proactive data sharing with stakeholders.