H-1B Visa Incident Response Engineer Jobs
Incident Response Engineer roles sit squarely within H-1B specialty occupation territory, requiring at least a bachelor's degree in computer science, cybersecurity, or a related field. Employers in financial services, defense contracting, and enterprise tech are among the most active H-1B sponsors for this title, and the role's STEM classification supports cap-exempt employer pathways at qualifying research institutions.
See All Incident Response Engineer JobsOverview
Showing 5 of 26+ Incident Response Engineer jobs
Have you applied for this role?
Have you applied for this role?
Have you applied for this role?
Have you applied for this role?
Have you applied for this role?
See all Incident Response Engineer jobs
Sign up for free to unlock all listings, filter by visa type, and get alerts for new Incident Response Engineer roles.
Get Access To All JobsPosition Summary
Role summary:
The Senior Incident Response Engineer will lead the development and execution of cyber incident response procedures to mitigate and contain threats across environments. This role involves driving investigations of external and insider threats, mentoring team members, and enhancing detection and mitigation processes. The position requires expertise in vulnerability assessment, threat intelligence analysis, and cyber risk management to protect organizational assets. The engineer will collaborate with stakeholders to communicate findings and implement security improvements, ensuring adherence to industry standards and advancing the company’s cybersecurity posture through proactive and strategic incident management.
About the team:
Walmart’s Global CSIRT protects one of the world’s largest retail ecosystems by providing continuous, 24/7 incident response across multiple countries and platforms. The team investigates and mitigates cyber threats to reduce business impact and uphold customer trust. Working closely with engineering, infrastructure, legal, compliance, and leadership, the team ensures effective incident management and security enhancements. Beyond response activities, the team advances Walmart’s security posture through intelligence-driven defense and lessons learned. This role offers the opportunity to contribute to a global cyber defense operation with precision and strong cross-functional collaboration.
What you'll do:
- Lead and execute cyber incident response activities, including detection, containment, and mitigation across network and cloud environments.
- Investigate external and insider threats, conducting malware analysis and forensic examinations to identify root causes.
- Develop and refine incident response procedures and playbooks aligned with industry standards such as NIST and ISO27001.
- Perform vulnerability assessments and penetration testing to identify and remediate security weaknesses.
- Analyze threat intelligence to inform proactive defense strategies and communicate findings to stakeholders.
- Mentor team members on incident handling and support continuous improvement of response capabilities.
- Collaborate with cross-functional teams to manage cyber risk and enhance security posture.
What you'll bring:
- Extensive experience in cyber incident response, including knowledge of incident phases and mitigation strategies.
- Proficiency with security standards such as NIST 800-53, ISO27001, and Cloud Security Alliance frameworks.
- Strong skills in malware analysis, vulnerability assessment, and penetration testing methodologies.
- Expertise in threat intelligence analysis and application of the MITRE ATT&CK Framework.
- Ability to lead investigations of cyber threats and insider incidents while mentoring team members.
- Competence in stakeholder management and effective incident communication.
- GIAC Certified Incident Handler or equivalent certification preferred.
At Walmart, we offer competitive pay as well as performance-based bonus awards and other great benefits for a happier mind, body, and wallet. Health benefits include medical, vision and dental coverage. Financial benefits include 401(k), stock purchase and company-paid life insurance. Paid time off benefits include PTO (including sick leave), parental leave, family care leave, bereavement, jury duty, and voting. Other benefits include short-term and long-term disability, company discounts, Military Leave Pay, adoption and surrogacy expense reimbursement, and more. You will also receive PTO and/or PPTO that can be used for vacation, sick leave, holidays, or other purposes. The amount you receive depends on your job classification and length of employment. It will meet or exceed the requirements of paid sick leave laws, where applicable. For information about PTO, see https://one.walmart.com/notices. Live Better U is a Walmart-paid education benefit program for full-time and part-time associates in Walmart and Sam's Club facilities. Programs range from high school completion to bachelor's degrees, including English Language Learning and short-form certificates. Tuition, books, and fees are completely paid for by Walmart.
Eligibility requirements apply to some benefits and may depend on your job classification and length of employment. Benefits are subject to change and may be subject to a specific plan or program terms.
For information about benefits and eligibility, see One.Walmart.
LOCATION
Herndon, Virginia US-10710: The annual salary range for this position is $108,000.00 - $216,000.00
Bentonville, Arkansas US-09050: The annual salary range for this position is $90,000.00 - $180,000.00 Additional compensation includes annual or quarterly performance bonuses. Additional compensation for certain positions may also include:
- Stock
Minimum Qualifications
Option 1: Bachelor's degree in computer science, information technology, engineering, information systems, cybersecurity, or related area and 3 years’ experience in incident response or related area at a technology, retail, or data-driven company. Option 2: 5 years’ experience in incident response or related area at a technology, retail, or data-driven company.
Preferred Qualifications
Certifications in Security+, Network+, GISF, GSEC, CISSP, CCSP, or GCIH, Master’s degree in Computer Science, Information Technology, Engineering, Information Systems, Cybersecurity, or related area and 1 Years' Exposure of leading/working on Information Security/Cyber Security Projects. We value candidates with a background in creating inclusive digital experiences, demonstrating knowledge in implementing Web Content Accessibility Guidelines (WCAG) 2.2 AA standards, assistive technologies, and integrating digital accessibility seamlessly. The ideal candidate would have knowledge of accessibility best practices and join us as we continue to create accessible products and services following Walmart’s accessibility standards and guidelines for supporting an inclusive culture. CISSP - Certified Information Systems Security Professional - Certification.
Walmart and its subsidiaries are committed to maintaining a drug-free workplace and has a no tolerance policy regarding the use of illegal drugs and alcohol on the job. This policy applies to all employees and aims to create a safe and productive work environment.
Position Summary
Role summary:
The Senior Incident Response Engineer will lead the development and execution of cyber incident response procedures to mitigate and contain threats across environments. This role involves driving investigations of external and insider threats, mentoring team members, and enhancing detection and mitigation processes. The position requires expertise in vulnerability assessment, threat intelligence analysis, and cyber risk management to protect organizational assets. The engineer will collaborate with stakeholders to communicate findings and implement security improvements, ensuring adherence to industry standards and advancing the company’s cybersecurity posture through proactive and strategic incident management.
About the team:
Walmart’s Global CSIRT protects one of the world’s largest retail ecosystems by providing continuous, 24/7 incident response across multiple countries and platforms. The team investigates and mitigates cyber threats to reduce business impact and uphold customer trust. Working closely with engineering, infrastructure, legal, compliance, and leadership, the team ensures effective incident management and security enhancements. Beyond response activities, the team advances Walmart’s security posture through intelligence-driven defense and lessons learned. This role offers the opportunity to contribute to a global cyber defense operation with precision and strong cross-functional collaboration.
What you'll do:
- Lead and execute cyber incident response activities, including detection, containment, and mitigation across network and cloud environments.
- Investigate external and insider threats, conducting malware analysis and forensic examinations to identify root causes.
- Develop and refine incident response procedures and playbooks aligned with industry standards such as NIST and ISO27001.
- Perform vulnerability assessments and penetration testing to identify and remediate security weaknesses.
- Analyze threat intelligence to inform proactive defense strategies and communicate findings to stakeholders.
- Mentor team members on incident handling and support continuous improvement of response capabilities.
- Collaborate with cross-functional teams to manage cyber risk and enhance security posture.
What you'll bring:
- Extensive experience in cyber incident response, including knowledge of incident phases and mitigation strategies.
- Proficiency with security standards such as NIST 800-53, ISO27001, and Cloud Security Alliance frameworks.
- Strong skills in malware analysis, vulnerability assessment, and penetration testing methodologies.
- Expertise in threat intelligence analysis and application of the MITRE ATT&CK Framework.
- Ability to lead investigations of cyber threats and insider incidents while mentoring team members.
- Competence in stakeholder management and effective incident communication.
- GIAC Certified Incident Handler or equivalent certification preferred.
At Walmart, we offer competitive pay as well as performance-based bonus awards and other great benefits for a happier mind, body, and wallet. Health benefits include medical, vision and dental coverage. Financial benefits include 401(k), stock purchase and company-paid life insurance. Paid time off benefits include PTO (including sick leave), parental leave, family care leave, bereavement, jury duty, and voting. Other benefits include short-term and long-term disability, company discounts, Military Leave Pay, adoption and surrogacy expense reimbursement, and more. You will also receive PTO and/or PPTO that can be used for vacation, sick leave, holidays, or other purposes. The amount you receive depends on your job classification and length of employment. It will meet or exceed the requirements of paid sick leave laws, where applicable. For information about PTO, see https://one.walmart.com/notices. Live Better U is a Walmart-paid education benefit program for full-time and part-time associates in Walmart and Sam's Club facilities. Programs range from high school completion to bachelor's degrees, including English Language Learning and short-form certificates. Tuition, books, and fees are completely paid for by Walmart.
Eligibility requirements apply to some benefits and may depend on your job classification and length of employment. Benefits are subject to change and may be subject to a specific plan or program terms.
For information about benefits and eligibility, see One.Walmart.
LOCATION
Herndon, Virginia US-10710: The annual salary range for this position is $108,000.00 - $216,000.00
Bentonville, Arkansas US-09050: The annual salary range for this position is $90,000.00 - $180,000.00 Additional compensation includes annual or quarterly performance bonuses. Additional compensation for certain positions may also include:
- Stock
Minimum Qualifications
Option 1: Bachelor's degree in computer science, information technology, engineering, information systems, cybersecurity, or related area and 3 years’ experience in incident response or related area at a technology, retail, or data-driven company. Option 2: 5 years’ experience in incident response or related area at a technology, retail, or data-driven company.
Preferred Qualifications
Certifications in Security+, Network+, GISF, GSEC, CISSP, CCSP, or GCIH, Master’s degree in Computer Science, Information Technology, Engineering, Information Systems, Cybersecurity, or related area and 1 Years' Exposure of leading/working on Information Security/Cyber Security Projects. We value candidates with a background in creating inclusive digital experiences, demonstrating knowledge in implementing Web Content Accessibility Guidelines (WCAG) 2.2 AA standards, assistive technologies, and integrating digital accessibility seamlessly. The ideal candidate would have knowledge of accessibility best practices and join us as we continue to create accessible products and services following Walmart’s accessibility standards and guidelines for supporting an inclusive culture. CISSP - Certified Information Systems Security Professional - Certification.
Walmart and its subsidiaries are committed to maintaining a drug-free workplace and has a no tolerance policy regarding the use of illegal drugs and alcohol on the job. This policy applies to all employees and aims to create a safe and productive work environment.
See all Incident Response Engineer jobs
Sign up for free to unlock all listings, filter by visa type, and get alerts for new Incident Response Engineer roles.
Get Access To All JobsTips for Finding H-1B Visa Sponsorship as an Incident Response Engineer
Align your credentials to SOC code 15-1212
Incident Response Engineers are typically classified under SOC 15-1212 (Information Security Analysts) for LCA purposes. Confirm your degree field maps to cybersecurity or computer science before applying, since a mismatched specialty can trigger an RFE during adjudication.
Verify prevailing wage before accepting offers
Use the OFLC Wage Search to check the Level I through Level IV wage for SOC 15-1212 in the employer's metro area. Your offered salary must meet or exceed the certified LCA wage, and underpayment is one of the most common DOL audit triggers for this occupation.
Target employers with active clearance programs
Defense contractors and federal system integrators that sponsor security clearances often prefer sponsoring H-1B holders directly rather than using staffing firms, since clearance continuity matters. Filing through a direct employer also reduces the risk of controlled-unclassified-information restrictions complicating your petition.
Use Migrate Mate to find verified H-1B sponsors
Search Incident Response Engineer roles on Migrate Mate to filter specifically for employers with confirmed H-1B LCA filing history in cybersecurity and information security titles, so you're not cold-applying to companies with no sponsorship track record.
Request premium processing before your start date
USCIS premium processing guarantees a 15-business-day adjudication decision. For Incident Response roles, where security incidents don't wait for visa timelines, asking your employer to file with premium processing protects both sides if onboarding needs to align with an active incident program.
Document hands-on tools in your support letter
USCIS officers reviewing cybersecurity petitions increasingly scrutinize whether the role genuinely requires a specialized degree. Your employer's support letter should tie specific incident response platforms, forensic toolsets, and threat-intelligence frameworks directly to the degree requirement to preempt specialty occupation RFEs.
Incident Response Engineer jobs are hiring across the US. Find yours.
Find Incident Response Engineer JobsIncident Response Engineer H-1B Visa: Frequently Asked Questions
Does an Incident Response Engineer role qualify as an H-1B specialty occupation?
Yes. Incident Response Engineers typically qualify under the H-1B specialty occupation standard because the role normally requires at least a bachelor's degree in computer science, cybersecurity, information systems, or a closely related field. USCIS evaluates the specific job duties and the employer's actual requirements, so the offer letter and support letter should explicitly state the degree requirement rather than listing it as preferred.
Which industries sponsor H-1B visas most consistently for Incident Response Engineers?
Financial services firms, enterprise technology companies, federal contractors, managed security service providers, and cloud infrastructure companies are among the most consistent H-1B sponsors for this title. These employers file LCAs under DOL regularly for information security roles and tend to have established immigration programs. You can browse employer-specific filing history for Incident Response Engineer roles on Migrate Mate before applying.
Can I work for a cap-exempt employer as an Incident Response Engineer on H-1B?
Yes, if the employer qualifies. Universities, nonprofit research institutions affiliated with universities, and certain government research organizations are cap-exempt, meaning your employer can file an H-1B petition outside the annual lottery. Cybersecurity and incident response functions at these institutions, such as university security operations centers or research lab threat teams, can support a cap-exempt filing if the role is tied to the institution's core mission.
What happens to my H-1B status if I'm laid off from an Incident Response Engineer position?
You have a 60-day grace period after your employment ends to find a new sponsoring employer, file a change of status, or take another action to maintain lawful status. During that window, a new employer can file an H-1B transfer petition using portability rules under AC21, allowing you to start work once the transfer is filed, not just approved. Acting within the first 30 days gives you the most flexibility.
How does the H-1B prevailing wage requirement affect offers for Incident Response Engineers?
Before filing your H-1B petition, your employer must obtain a certified LCA from DOL confirming your offered salary meets the prevailing wage for the Incident Response Engineer or Information Security Analyst role in the specific work location. The wage level (I through IV) reflects your experience, and your actual offer must match or exceed it. You can verify the applicable wage range using the OFLC Wage Search before negotiating your offer.
See which Incident Response Engineer employers are hiring and sponsoring visas right now.
Search Incident Response Engineer Jobs