# Incident Commander (Tier 3) at Jobgether > Remote · United States · Unspecified · Other · open. Source: https://alderhq.app/jobs/lever%3Ajobgether%3A3d6fcdc2-64cf-477a-8a0b-e1a487ba3b49 (read 2026-11-12). ## Facts (observed) - Company: [Jobgether](https://alderhq.app/companies/jobgether) - Location text: US - Where it can be done from (inferred): Remote · United States (evidence: "Location: US") - Posted: 2026-11-12 (0 days ago) - First seen by alder: 2026-11-12 · last verified: 2026-11-12 - Reposted: 0 times · edited: 0 times - Apply on the employer's site: https://jobs.lever.co/jobgether/3d6fcdc2-64cf-477a-8a0b-e1a487ba3b49 ## Pay and sponsorship - Posted pay: not posted - Market band for similar posted roles (United States, n 35887): p25 $55k, median $85k, p75 $140k ## Description (the employer's text) ### Accountabilities Advanced Incident Response: Lead Tier 3 investigations into complex cybersecurity incidents, including malware infections, phishing campaigns, ransomware attacks, social engineering, data exposure, and other security threats. Analyze attack vectors, adversary behavior, and indicators of compromise to determine incident severity, scope, and potential impact. Incident Command & Coordination: Serve as the primary operational coordinator during significant security incidents, assigning response actions and coordinating enterprise teams, incident responders, stakeholders, resources, and timelines to ensure effective resolution. Security Monitoring & Threat Analysis: Review escalated security alerts and analyze events using Splunk SIEM and other security platforms. Perform advanced incident triage, distinguish genuine threats from false positives, and determine appropriate containment, investigation, or escalation measures. Containment & Recovery: Coordinate incident containment, remediation, and recovery activities to minimize operational disruption, mitigate risks, and restore affected systems and services. Incident Documentation & Reporting: Create, maintain, and track incident records throughout the investigation lifecycle, ensuring accurate documentation and compliance with applicable federal requirements, organizational policies, and reporting procedures. Forensic Investigation & Threat Hunting: Collaborate with digital forensic investigators and application security specialists to conduct endpoint, network, and log analysis, identify indicators of compromise, establish incident scope, and support root-cause investigations. Security Improvement & Risk Management: Evaluate and recommend technical, procedural, and physical security controls to address vulnerabilities, reduce incident impact, and prevent recurrence. Stakeholder Communication: Prepare incident notifications, executive briefings, status updates, and post-incident reports covering investigation findings, response actions, remediation progress, recovery activities, and lessons learned. Operational Compliance: Ensure adherence to established standard operating procedures, escalation protocols, security policies, and applicable regulatory requirements, including timely incident notifications to federal leadership. ### Requirements Professional Experience: At least 7 years of relevant professional experience, or a bachelor's degree combined with at least 3 years of relevant experience. Citizenship & Security Eligibility: U.S. citizenship is mandatory due to federal contract requirements. Candidates must be able to successfully complete a federal background investigation for a High-Risk Public Trust position, including applicable credit checks, and obtain and maintain the required Public Trust. Mandatory Certifications: An active CISSP certification from ISC2, together with an active GCIH certification from GIAC or an equivalent relevant certification in incident response, digital forensics, or cybersecurity, is required. Incident Response Expertise: Extensive experience managing cybersecurity incidents, conducting advanced incident triage, coordinating investigations, and leading response activities through resolution. Security Operations: Strong experience in Security Operations Center (SOC) operations, threat hunting, intrusion detection and prevention, security event monitoring, and incident detection and response. Security Tools & Technologies: Working knowledge of Splunk SIEM, Microsoft Defender EDR, Palo Alto Networks Cortex XSOAR, and digital forensic and incident response tools. Experience with FireEye products and other enterprise security solutions is also valuable. Networking & Systems Knowledge: Expert understanding of TCP/IP protocols, network traffic analysis, IDS/IPS technologies, security log correlation, Windows and Unix/Linux operating systems, enterprise networking, system administration, and operating system hardening. Endpoint & Infrastructure Security: Experience with endpoint protection, antivirus solutions, EDR, host-based intrusion detection, firewalls, proxies, web application firewalls, and cloud security data collection. ### How Jobgether works We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team. We appreciate your interest and wish you the best! Why Apply Through Jobgether? Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time. #LI-CL1 --- Data: alder (https://alderhq.app). Cite https://alderhq.app/jobs/lever%3Ajobgether%3A3d6fcdc2-64cf-477a-8a0b-e1a487ba3b49 and the date you read it. Observed facts come from the employer's own listing; location reach, level, family and skills are inferences.