Incident Response Engineer Jobs in California
Incident Response Engineer jobs in California sit at the center of one of the most active cybersecurity hiring markets in the country, with demand concentrated in enterprise technology, defense contracting, financial services, and healthcare across roles from junior analysts through principal engineers. The largest hiring volume runs through the San Francisco Bay Area, Los Angeles, and San Diego, where employers like Google, Northrop Grumman, and Kaiser Permanente maintain deep security teams. Cloud security incident response, threat hunting, and SIEM engineering are the sub-areas drawing the strongest California demand. Find a role that fits below and apply directly.
Find JobsOverview
Showing 5 of 6+ Incident Response Engineer jobs











INTRODUCTION
Our Adobe Cyber Defense Center is seeking a highly skilled and experienced Staff Cyber Incident Responder. This senior role is pivotal in our incident response efforts, providing skilled forensic analysis and proactively defending our enterprise against evolving cyber threats. You will work with a multinational team, bringing to bear your extensive experience to improve our incident response capabilities and drive continuous improvement. If you excel in a challenging environment and are ready to contribute to our Incident Response program, we want to hear from you!
ROLE AND RESPONSIBILITIES
- Incident Response: Lead and conduct comprehensive host forensics, network forensics, log analysis, and malware triage to support incident response investigations.
- Tool Development: Create and enhance scripts, tools, and methodologies to automate and improve our incident investigation processes.
- Leadership and Mentorship: Provide leadership and mentorship to the incident response team, acting as a resource and guide for other team members.
- Partner and Report: Partner with multiple internal and external organizations. Draft detailed reports, assign remediation actions, and implement improvements.
- Training and Presentations: Develop and present comprehensive reports, training sessions, and presentations for both technical and non-technical audiences.
- Tabletop Exercises: Participate in and help conduct tabletop exercises and incident simulations to ensure readiness.
- Threat Hunting: Collaborate with the Adobe Threat Hunting Team to conduct proactive and iterative hunts through cloud and enterprise networks, endpoints, and datasets to detect malicious or suspicious activities that have evaded existing detection tools.
BASIC QUALIFICATIONS
- Experience: 7+ years of proven experience in end-to-end incident response processes, including leading complex, multi-functional incidents.
- Investigative Skills: Strong investigative background with expertise in Windows analysis and forensics.
- Container Environments: Experience working in container environments such as Kubernetes and Docker.
- EDR Solutions: Hands-on experience with various Endpoint Detection and Response (EDR) solutions.
- System Internals: Deep understanding of the internals and constructs of Linux, MacOS, and Windows operating systems.
- Cloud Security: Extensive experience in administering, attacking, or defending cloud environments (AWS, Azure, GCP).
- Log Analysis: Deep understanding of logs from cloud, network, and endpoint devices.
- SIEM Expertise: Excellent skills in writing complex searches or analytics for popular Security Information and Event Management (SIEM) solutions.
- Programming Skills: Proficiency in bash and at least one interpreted programming language (Python, Ruby, etc.).
- Team Collaboration: Strong ability to promote a collaborative working environment that enhances teamwork, predictability, clarity, and a culture of innovation.
- Multitasking: Ability to handle multiple tasks in a fast-paced environment effectively.
- On-Call Rotation: Willingness to participate in an on-call rotation as required.
PREFERRED QUALIFICATIONS
- Innovation: Be part of a team that fosters a culture of experimentation, innovation, and continuous learning.
- Impact: Play a key role in safeguarding our enterprise from advanced cyber threats and improving our overall security posture.
- Growth: Opportunities for professional growth and development through challenging projects and ongoing training.
- Collaboration: Work in a collaborative environment that values relationships and teamwork.
ABOUT ADOBE
Adobe empowers everyone to create through innovative platforms and tools that unleash creativity, productivity and personalized customer experiences. Adobe’s industry-leading offerings including Adobe Acrobat Studio, Adobe Express, Adobe Firefly, Creative Cloud, Adobe Experience Platform, Adobe Experience Manager, and GenStudio enable people and businesses to turn ideas into impact, powered by AI and driven by human ingenuity. Our 30,000+ employees worldwide are creating the future and raising the bar as we drive the next decade of growth. We’re on a mission to hire the very best and believe in creating a company culture where all employees are empowered to make an impact. At Adobe, we believe that great ideas can come from anywhere in the organization. The next big idea could be yours.
LET’S ADOBE TOGETHER
At Adobe, we believe in creating a company culture where all employees are empowered to make an impact. Learn more about Adobe life, including our values and culture, focus on people, purpose and community, Adobe for All, comprehensive benefits programs, the stories we tell, the customers we serve, and how you can help us advance our mission of empowering everyone to create.
Adobe is proud to be an Equal Employment Opportunity employer. We do not discriminate based on gender, race or color, ethnicity or national origin, age, disability, religion, sexual orientation, gender identity or expression, veteran status, or any other protected characteristic. Learn more. Adobe aims to make our Careers website and recruiting process accessible to any and all users. If you have a disability or special need that requires accommodation to navigate our website or complete the application process, email accommodations@adobe.com or call +1 408-536-3015.
AI USE GUIDELINES FOR INTERVIEWS:
Our interviews are designed to reflect your own skills and thinking. The use of AI or recording tools during live interviews is not permitted unless explicitly invited by the interviewer or approved in advance as part of a reasonable accommodation. If these tools are used inappropriately or in a way that misrepresents your work, your application may not move forward in the process. At Adobe, we empower employees to innovate with AI — and we look for candidates eager to do the same. As part of the hiring experience, we provide clear guidance on where AI is encouraged during the process and where it’s restricted during live interviews. See how we think about AI in the hiring experience.
EXPECTED PAY RANGE
Our compensation reflects the cost of labor across several U.S. geographic markets, and we pay differently based on those defined markets. The U.S. pay range for this position is $168,200 - $310,100 annually. Pay within this range varies by work location and may also depend on job-related knowledge, skills, and experience. Your recruiter can share more about the specific salary range for the job location during the hiring process. In California, the pay range for this position is $214,100 - $310,100. In Washington, the pay range for this position is $194,000 - $281,000. At Adobe, for sales roles starting salaries are expressed as total target compensation (TTC = base + commission), and short-term incentives are in the form of sales commission plans. Non-sales roles starting salaries are expressed as base salary and short-term incentives are in the form of the Annual Incentive Plan (AIP). In addition, certain roles may be eligible for long-term incentives in the form of a new hire equity award.
STATE-SPECIFIC NOTICES
California: Fair Chance Ordinances
Adobe will consider qualified applicants with arrest or conviction records for employment in accordance with state and local laws and “fair chance” ordinances.
Colorado: Application Window Notice
If this role is open to hiring in Colorado (as listed on the job posting), the application window will remain open until at least the date and time stated above in Pacific Time, in compliance with Colorado pay transparency regulations. If this role does not have Colorado listed as a hiring location, no specific application window applies, and the posting may close at any time based on hiring needs.
Massachusetts: Massachusetts Legal Notice
It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.
See All 6 Incident Response Engineer Jobs in California
Find roles in California that match your experience and apply in just a few clicks.
Find JobsIncident Response Engineer Jobs by City in California
Where California roles are concentrated, by current openings.
Incident Response Engineer Job Market in California
A snapshot from current California openings, updated as new roles post.
Who's Hiring
- NTT DATA2

- Adobe1

- Ah Capital Management1

- Palo Alto Networks1

- Sony Pictures Entertainment1

Top Industries Hiring
- Technology & Software4
- Investment & Asset Management1
- Media & Entertainment1
What California Employers Look For
The qualifications that appear most often in incident response engineer jobs across California.
- Bachelor's degree in computer science, information security, or a closely related field
- Hands-on experience with SIEM platforms such as Splunk, Microsoft Sentinel, or Chronicle
- Relevant certification such as GCIH, GCFE, CEH, or CISSP recognized by California employers
- Demonstrated ability to lead end-to-end incident investigations from triage through post-mortem
- Proficiency in scripting languages such as Python or PowerShell for automation and log analysis
- Familiarity with cloud environments including AWS, Azure, or Google Cloud and their security tooling
Incident Response Engineer Jobs in California: Frequently Asked Questions
How do you become an incident response engineer in California?
Most California employers expect a bachelor's degree in computer science, cybersecurity, or information systems, though equivalent self-taught backgrounds paired with recognized certifications are accepted at many organizations. California does not issue a state license for this role, so the credential that carries the most weight with California hiring teams is an industry certification such as the GIAC Certified Incident Handler (GCIH) or CISSP. Building hands-on experience through a SOC analyst or security operations role is the most reliable path into incident response engineering in this state.
How much do incident response engineers make in California?
Incident response engineers in California earn a median of about $134,440 a year, based on May 2025 Bureau of Labor Statistics wage data, ranging from around $58,340 for the lowest 10% to over $222,690 for the top 10%. Pay rises with experience, specialty, and employer.
Which companies hire incident response engineers in California?
Employers hiring incident response engineers in California right now include NTT DATA, Adobe, and Ah Capital Management, based on current listings on Migrate Mate as of June 2026. California's concentration of major tech headquarters, defense contractors, and large healthcare systems means consistent year-round demand for this role across a wide range of sectors.
Which California cities have the most incident response engineer jobs?
Brea, Culver City, and San Francisco account for the most incident response engineer openings in California. The Bay Area leads because of its density of cloud and enterprise technology companies, Los Angeles draws from entertainment, finance, and defense contractors based in the region, and San Diego benefits from the large military and defense technology presence anchored there.
Are there remote incident response engineer jobs in California?
Yes, and more than most security roles, because much of the work centers on log analysis, tool management, and investigation workflows that run entirely through cloud platforms. About 0% of incident response engineer openings tied to California are remote or hybrid as of June 2026, reflecting how broadly distributed security teams have become. Threat intelligence, SIEM engineering, and detection engineering sub-roles tend to be the most remote-accessible, while forensic and on-site IR work remains largely in-person.
How can I get hired as an incident response engineer in California with little or no experience?
The most realistic entry path is landing a SOC analyst or cybersecurity analyst role first, then moving laterally into incident response once you have live triage experience. Large California employers like Northrop Grumman, Palo Alto Networks, and Kaiser Permanente run associate security programs and early-career pipelines that accept candidates without prior professional experience. Earning the CompTIA Security+ or GCIH certification before you apply strengthens your application considerably, and building a portfolio through capture-the-flag competitions or a home lab is a concrete signal California hiring managers look for when evaluating entry-level candidates.
Where can I find and apply to incident response engineer jobs in California?
You can find and apply to incident response engineer jobs in California on Migrate Mate, which lists current California openings. Search the listings, find roles that fit your experience and target location, and apply directly to the ones that match.
See All 6 Incident Response Engineer Jobs in California
Find roles in California that match your experience and apply in just a few clicks.
Find Jobs