{"id":2402857,"url":"https://alion.io/job/integriti-incident-response-specialist","title":"Incident Response Specialist","company":{"id":4420220,"name":"Integriti","domain":"integriti.io","url":"https://alion.io/company/integriti-2","size_band":"51-200","is_staffing_agency":false,"employer_type":"staffing","is_intermediary":false,"listed_via":null,"ats_vendor":"Manatal","truth_index":null},"role":"Security","role_family":"Security","seniority":"middle","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Toronto, Canada"],"countries":["CA"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":57000,"max_usd":107000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":13},"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Azure","optional":false},{"name":"GCP","optional":false},{"name":"SIEM","optional":false}],"status":"live","first_seen_at":"2026-10-13T00:02:19Z","employer_posted_date":"2026-10-13","last_verified_at":"2026-10-22T20:36:39Z","board_verified":true,"closed_at":null,"days_open":10,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":10},"description":"Responsibilities:\nMonitor, assess, and triage security alerts and events from SIEM, EDR/XDR, email security, cloud security, and other monitoring platforms.\nValidate security incidents and determine severity, scope, and business impact.\nConduct end-to-end investigations of cybersecurity incidents including phishing, malware, ransomware, account compromise, insider threat, unauthorized access, data exfiltration, and cloud-related incidents\nDocument investigative findings, timelines, indicators of compromise (IOCs), and remediation recommendations.\nContribute to use case development, threat hunting, and IOC enrichment where needed.\nRequired Skills:\n3-5 years of cybersecurity experience, with at least 2-3 years in incident response, SOC, or cyber investigations.\nStrong understanding of the incident response lifecycle: preparation, identification, containment, eradication, recovery, and lessons learned.\nHands-on experience with common incident categories such as phishing, malware, endpoint compromise, suspicious authentication activity, privilege misuse, and cloud security events\nHands-on experience with:SIEM, EDR/XDR, Identity & cloud logs (Azure, GCP)\n\nStrong skills in log analysis, IOC identification, and root cause determination\nExperience documenting incidents and producing actionable remediation guidance\nExperience performing Threat hunting using KQL or other query languages, SOAR/playbook automation","description_format":"text","description_chars":1425,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Incident Response"],"lifecycle":[{"event":"open","at":"2026-10-13T00:02:19Z"}],"visa":[],"liveness":{"score":85,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.847,"p_room":1,"age_days":9,"expected_fill_days":31,"reasons":["conf:0","velocity","win:early"],"computed_at":"2026-10-22T06:10:10Z"},"pay":null,"html_url":"https://alion.io/job/integriti-incident-response-specialist","json_url":"https://alion.io/job/integriti-incident-response-specialist.json","meta":{"generated_at":"2026-10-23T00:17:56Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":454,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-24T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":4420220},"rest":"https://alion.io/mcp/rest/get_company?id=4420220"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fintegriti-incident-response-specialist"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fintegriti-incident-response-specialist"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fintegriti-incident-response-specialist"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/integriti-incident-response-specialist\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fintegriti-incident-response-specialist"}]}